Hacker News new | past | comments | ask | show | jobs | submit login
Show HN: Rootful containers can be more secure than rootless ones [Podman] (github.com/containers)
2 points by tobwen on June 16, 2023 | hide | past | favorite
While rootless containers are suitable for user-managed containers on a system, for server-based container deployments, utilizing the "--userns=auto" option provides a more secure solution in Podman.

In Podman, when running containers in a non-privileged environment (rootless), they operate within the same user namespace, potentially leading to attacks between containers.

However, running the containers as root (rootful) with the "--userns auto" flag, Podman ensures isolation within distinct user namespaces, thereby enhancing security.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: