Docker Fundamentals — Hard
Key points
- User namespace remapping changes the container's root user to a non-privileged UID on the host
- This ensures that even if a process escapes the container as root, it appears as an unprivileged user on the host
- Provides defense in depth against container escape vulnerabilities
Ready to go further?
Related questions
