Rootless containers

Rootless mode was introduced as experimental in Docker engine 19.03

• RHEL 8 Features: rootless containers is available as a technology preview

minikube config set rootless true

minikube start
Exiting due to MK_USAGE: --container-runtime must be set to "containerd" or "cri-o" for rootless

Activities

• Read Running rootless Podman as a non-root user https://www.redhat.com/sysadmin/rootless-podman-makes-sense

Related

• CRI-O

See also

• containerd, config.toml, containerd-shim, runc, journalctl -u containerd, ctr, SOCI Snapshotter, Containerd versions
• Containers, OCI: Docker (dockerd), containerd, runc, Podman, buildah, skopeo, lxd, Container Registry, Service mesh, Windows Server containers, Containerpilot, CoreOS, CAdvisor, Containers networking, Container scanning, cosign, CRI, CRI-O, initContainers, Sidecar container, Container images, latest

https://hub.packtpub.com/docker-19-03-introduces-an-experimental-rootless-docker-mode-that-helps-mitigate-vulnerabilities-by-hardening-the-docker-daemon/

https://github.com/moby/moby/pull/38050