Re:Non-root containers, Kubernetes CVE-2019-11245 and why yo...
by westurner on Friday August 30, 2019 @05:38PM
(#20842962)
> At the same time, all the current implementations of rootless containers rely on user namespaces at their core. Not to be confused with what is referred to as non-root containers in this article, rootless containers are containers that can be run and managed by unprivileged users on the host. While Docker and other runtimes require a daemon running as root, rootless containers can be run by any user without additional capabilities.
non-root / rootless