“The Docker daemon must run as root. So, anyone who can talk to Docker has root privileges. As a result, any container running on the system can potentially obtain root privileges on the host.” Docker containers are cool. If you haven’t yet played with Docker, you’re missing a large world of easily deployed applications. For example, I can deploy NodeRed, Plex, Jupyter Lab, and Nextcloud servers, and run them behind a Traefik reverse proxy with a single command and a YAML text file. If you’re running an HTPC, NAS, or home Linux server, Docker lets you do just about anything.
Containers (like Docker containers) emulate a filesystem, networking, and other OS components in order to allow applications to isolate themselves from the host OS. Containers generally don’t require dedicated resources,…