Privileged Container - CI/CD Glossary Definition

A privileged container runs with --privileged, granting nearly all host kernel capabilities and device access. It effectively removes container isolation and can control the host.

Avoid it in CI

Privileged mode is sometimes used for Docker-in-Docker builds, but it is dangerous on shared runners because a compromised job can take over the host. Prefer rootless builders or a sandboxed runtime instead.

Related guides