Alle Optionen
bullseye  ] [  bookworm  ] [  trixie  ] [  sid  ]
[ Quellcode: rootlesskit  ]

Paket: rootlesskit (1.1.0-1 und andere)

Links für rootlesskit

Screenshot

Debian-Ressourcen:

Quellcode-Paket rootlesskit herunterladen:

Betreuer:

Externe Ressourcen:

Ähnliche Pakete:

Linux-native "fake root" for rootless containers

The purpose of RootlessKit is to run Docker and Kubernetes as an unprivileged user (known as "Rootless mode"), so as to protect the real root on the host from potential container-breakout attacks.

RootlessKit creates user_namespaces(7) and mount_namespaces(7), and executes newuidmap(1)/newgidmap(1) along with subuid(5) and subgid(5).

RootlessKit also supports isolating network_namespaces(7) with userspace NAT using "slirp".

This Debian package doesn't support vpnkit mode.

On Debian system, kernel.unprivileged_userns_clone should be enabled.

Andere Pakete mit Bezug zu rootlesskit

  • hängt ab von
  • empfiehlt
  • schlägt vor
  • erweitert

rootlesskit herunterladen

Download für alle verfügbaren Architekturen
Architektur Version Paketgröße Größe (installiert) Dateien
armel 1.1.0-1+b4 3.132,3 kB18.213,0 kB [Liste der Dateien]