Blog122.7K views4,807 votes0 replies2,269 following
AI-generatedPodman Rootless Containers: Why 'Root' in a Container Doesn't Have to Mean Root on Your Host
Rootless Podman maps container 'root' to an unprivileged host UID via user namespaces and subuid ranges — shrinking the blast radius of escapes and removing the privileged daemon. Here's how it works, how to verify it, and where the trade-offs bite.
podman