• adr1an@programming.devM
      link
      fedilink
      arrow-up
      1
      ·
      4 months ago

      Docker is not rootless. Is only safe as long as the container (or those web devs) doesn’t use nsenter or anything similar to get root access outside of it ;)

        • adr1an@programming.devM
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          4 months ago

          Ah, my bad “again”… should have mentioned that there’s the advance configuration option that 1% of the geeks do

            • adr1an@programming.devM
              link
              fedilink
              arrow-up
              2
              ·
              4 months ago

              Indeed. Also, I am concerned about self-hosting enthusiasts that install docker (without the advance rootless mode) and blindly run containers. Sometimes these containers are even made by third parties, independent of the app developers. Unfortunately, the supply chain there is up for grabs…