Securing Services with Rootless Containers
Summary
A blog post discusses best practices for securing services by running containers without root privileges, reducing security risks.
View Cached Full Text
Cached at: 07/27/26, 10:47 PM
Similar Articles
Hardening Container Images
The article explains techniques for hardening container images, such as compiling applications statically, using minimal base images, and implementing Landlock to restrict filesystem and network access for improved security.
Enhancing X11 Application Security with LXC
A technical guide on using unprivileged LXC containers to isolate X11 applications like web browsers, enhancing security by mapping container UIDs/GIDs to unused host ranges.
Podman rootless containers and the Copy Fail exploit
The article discusses the Copy Fail exploit, a security vulnerability that affects Podman rootless containers.
Linux containers in 500 lines of code
A technical blog post explaining how Linux containers work in about 500 lines of C code, covering user namespaces, network namespaces, and capability subversion risks with working exploit demonstrations.
Using docker-compose with Podman rootless
A tutorial on using Podman rootless with docker-compose by exposing Podman's Docker-API-compatible UNIX socket and setting DOCKER_HOST, plus tips on disabling rootful Docker and using podman mount/unshare.