Docker 101 : Privileged containers

Docker allows us to have privileged containers that could have access to the resources of the "host" system.

We can run a privileged debian container for example using the below command:

In the above privileged container , we have access to the "/proc" filesystem for example.

Docker also allows us to add or remove capabilities depending on the container's needs.

Linux capabilities could be added to a container using the below command:

Below is a list of some of Linux capabilities:

To avoid security holes on a system, we could check the containers that are running with a privileged mode.

To look for privileged containers on a host, we could use the below command:

Leave as a comment:

IT hands-on