rootless

Kern is a minimal, fast container and resource runtime that provides rootless sandboxes and resource management in a single 1.52 MB binary without a daemon.

llama.cpp server build 10423 adds an experimental --tools-runtime option that lets the webui run tool shell commands inside rootless sandboxed containers (e.g., podman:alpine or docker:alpine), downloading and instantiating the image automatically.

A blog post discusses best practices for securing services by running containers without root privileges, reducing security risks.

The article discusses the Copy Fail exploit, a security vulnerability that affects Podman rootless containers.

Dopamine is an open-source rootless semi-untethered jailbreak for iOS 15.0-18.7.1 and 26.0-26.0.1, with download available via Ellekit.