yeha, but the big projects like linuxserver.io love creating docker images with root access, even if people have warned them it is an awful security practice. I rewrote all of their images in a personal repo, screw that. I won’t run shit as root in my machine, even in containers.
There’s rootless docker, or podman, or numerous other container runtimes. The beauty in containers is separating concerns. How you choose to run it, root or rootless, is up to you in all but the nichest of scenarios.
Rootful docker and rootless docker can be run at the same time on the same machine too. So projects that require root privileges can still work on a machine where most other projects run as rootless.
It’s because I’ve seen What people can do with a simple docker container that I completely agree. It’s too nice to go back.
I’d agree more if most docker stuff didn’t depend on running as root.
I think your looking for podman
yeha, but the big projects like linuxserver.io love creating docker images with root access, even if people have warned them it is an awful security practice. I rewrote all of their images in a personal repo, screw that. I won’t run shit as root in my machine, even in containers.
There’s rootless docker, or podman, or numerous other container runtimes. The beauty in containers is separating concerns. How you choose to run it, root or rootless, is up to you in all but the nichest of scenarios.
Rootful docker and rootless docker can be run at the same time on the same machine too. So projects that require root privileges can still work on a machine where most other projects run as rootless.