2 years ago

Although it’s possible to deploy https://www.docker.io containers without root privileges, that doesn’t necessarily mean it’s rootless throughout. That’s is because there are other components within the stack (such as runc, containerd, and dockerd) that do require root privileges to run.

The first issue is that rootless docker will not have access to privileged ports, which are any port below 1024.

To test rootless mode (deploying NGINX in detached mode), issue the command: docker run --name docker-nginx -p 8080:80 -d nginx

This container was deployed without using root, so the entire stack is without those elevated privileges.