Rootless containers

Rootless mode was introduced as experimental in Docker engine 19.03

• RHEL 8 Features: rootless containers is available as a technology preview

minikube config set rootless true

minikube start
Exiting due to MK_USAGE: --container-runtime must be set to "containerd" or "cri-o" for rootless

minikube
https://github.com/kubernetes/minikube/releases/tag/v1.32.0
rootless: support --container-runtime=docker

Activities

• Read Running rootless Podman as a non-root user https://www.redhat.com/sysadmin/rootless-podman-makes-sense

Related

• CRI-O

See also

• containerd, config.toml, containerd-shim, runc, journalctl -u containerd, ctr, SOCI Snapshotter, Containerd versions
• Container runtime, containerd, runc, podman, dockerd, CRI-O

https://hub.packtpub.com/docker-19-03-introduces-an-experimental-rootless-docker-mode-that-helps-mitigate-vulnerabilities-by-hardening-the-docker-daemon/

https://github.com/moby/moby/pull/38050