blob: 7ec2871653ca8a7a934ed7dd517fe746822a2ba6 (
plain)
1
2
3
4
5
6
7
8
9
|
Bubblewrap
Many container runtime tools like systemd-nspawn, docker,
etc. focus on providing infrastructure for system administrators and
orchestration tools (e.g. Kubernetes) to run containers.
These tools are not suitable to give to unprivileged users, because it
is trivial to turn such access into to a fully privileged root shell
on the host.
|
