Rootless Containers - Definição do Glossário de CI/CD
Rootless containers executam o container engine e as workloads sem root no host, mapeando UIDs de container para um user namespace sem privilégios, limitando o raio de impacto de um escape de container.
Guias relacionados
Linux Capabilities - CI/CD Glossary DefinitionLinux capabilities split root’s all-or-nothing power into discrete privileges, so a container can be granted…
seccomp - CI/CD Glossary Definitionseccomp filters which Linux syscalls a process may make, shrinking a container’s kernel attack surface. CI sa…
Zero Trust - CI/CD Glossary DefinitionZero trust assumes no implicit trust from network location: every request must be authenticated and authorize…