You mean for the container launcher to not require root?
Root isn’t required — look at Podman.
Docker spent so much on marketing, the world is too blind to pivot to a superior alternative!
Root isn’t required — look at Podman.
Docker spent so much on marketing, the world is too blind to pivot to a superior alternative!
There has been lot of sharp corners around userns and related tech that needed to get resolved. Notably Debian& Ubuntu disabled unprivileged userns for some legitimate security concerns
> This is a short-term patch. Unprivileged use of CLONE_NEWUSER is certainly an intended feature of user namespaces. However for at least saucy we want to make sure that, if any security issues are found, we have a fail-safe.
from: https://web.archive.org/web/20211022013829/https://kernel.ub...