Docker and CI/CD · Senior · Question 8 of 75
What does rootless mode or user namespace remapping protect against?
- ✓Correct answer: Root in the container maps to an unprivileged user on the host
- 2Images being pulled from registries that aren't trusted
- 3Containers being started by users who aren't in the docker group
Explanation
If a process escapes, it lands as an ordinary user rather than host root. Some features (low ports, certain storage drivers) need extra setup.