rootless-containers/rootlesskit
View on GitHub ↗ ★ 1,315 Go
Linux-native "fake root" for implementing rootless containers
6 mentions on Hacker News by 6 people: 0 stories, 6 comments · first 2018-09-25 · latest 2024-11-24
20082026
-
…your system. Linux makes it quite hard to run "containers" as an unprivileged user. Not impossible! https://github.com/rootless-containers/rootlesskit is one approach and demonstrates much of the difficulty involved. Networking is perhaps…
comment by schmichael · 2024-11-24 · in Bocker: Docker implemented in around 100 lines of Bash (2015) -
Warning, Rootless Docker doesn't support the ability to see the users source IP yet with IPv6. * https://github.com/rootless-containers/rootlesskit/issues/25... * https://github.com/rootless-containers/slirp4netns/issues/25... This has…
comment by geenat · 2021-12-07 · in Hetzner now provides IPv6 only dedicated servers -
…be some overhead with networking if your application uses a very large amount of bandwidth. See: https://github.com/rootless-containers/rootlesskit/tree/v0.1... Otherwise for general dockerized applications, you won't notice any…
comment by rbut · 2021-08-03 · in Docker container security cheat sheet -
…gvisor netstack, while not without problems, is likely to be faster than libslirp, see benchmarks https://github.com/rootless-containers/rootlesskit/pull/101#... )
comment by majke · 2021-03-02 · in SSH and User-Mode IP WireGuard -
…which uses userns by default, dont have problem with using host netns (--net=host) ? [1] https://github.com/rootless-containers/rootlesskit
comment by rdslw · 2020-05-14 · in Linux containers in a few lines of code -
…so you can have completely unprivileged containers in every sense of the word "just work"). [1]: https://github.com/rootless-containers/rootlesskit
comment by cyphar · 2018-09-25 · in Killing processes that don't want to die