Linux-native "fake root" for rootless containers
DescriptionThe purpose of RootlessKit is to run Docker and Kubernetes as an unprivileged user (known as "Rootless mode"), so as to protect the real root on the host from potential container-breakout attacks. RootlessKit creates user_namespaces(7) and mount_namespaces(7), and executes newuidmap(1)/newgidmap(1) along with subuid(5) and subgid(5). RootlessKit also supports isolating network_namespaces(7) with userspace NAT using "slirp". This Debian package doesn't support vpnkit mode. On Debian system, kernel.unprivileged_userns_clone should be enabled.
Upload more screenshots
Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.Upload a screenshot
Hint: upload an image here from your clipboard with Ctrl-V
Install this software package
If the package is available for the distribution you are currently using on your computer then install the software by clicking on…Install rootlesskit