search

lizrice / container-security

Resources for the O'Reilly Container Security book
https://containersecurity.tech
Apache License 2.0
97 stars 13 forks source link

User namespaces #10

Closed dalai4git closed 3 years ago

dalai4git commented 3 years ago

It is not always possible to run unshare --user bash without sudo. For example in Debian this seems to be not allowed by default: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808915.

lizrice commented 3 years ago

This seems like it was a bug in Debian? So I'm not sure it makes sense to refer to it in the book. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780841