Skip to content

Rootless Containers - CI/CD用語集の定義

rootless containerは、containerのUIDを非特権のuser namespaceにマッピングすることで、ホストのrootなしにcontainer engineとworkloadを実行し、container脱出の影響範囲を制限します。

関連ガイド

Linux Capabilities - CI/CD Glossary DefinitionLinux capabilities split root’s all-or-nothing power into discrete privileges, so a container can be granted… seccomp - CI/CD Glossary Definitionseccomp filters which Linux syscalls a process may make, shrinking a container’s kernel attack surface. CI sa… Zero Trust - CI/CD Glossary DefinitionZero trust assumes no implicit trust from network location: every request must be authenticated and authorize…