Rootless Docker

Rootless Docker

Reduce attack surface

It is not…

• Running as non-root in container
• Enabling user namespace mapping

It is…

• Running dockerd as non-root
• Experimental preview in Docker 19.03
• See slides by Aikihiro Suda