5 ms·
Paul, How are you securing the Docker containers since Docker hasn't yet added user namespaces?
by whackedspinach 12y ago
Paul,
How are you securing the Docker containers since Docker hasn't yet added user namespaces?
- hackerews 12y agoContainers open and close with every script run and then they're deleted. Never reopened.
- whackedspinach 12y agoDo you run the scripts as a specific user inside the container then? I was under the impression that running untrusted code in Docker as UID 0 was not yet safe.