Uploaded September 2017 | Updated September 2026, 5 days ago
Essentially all popular container runtimes require some form of root privileges in order to create and manage containers. This becomes a problem for certain systems, where administrators are hesitant to install any software, let alone a container runtime -- many of which allow for privileged containers without authentication.
In this talk, Aleksa Sarai will describe recent work done within runC by himself and other maintainers to allow people to use rootless containers with a well-supported container runtime, as well as discussing challenges discovered by this work and kernel work which is being done to alleviate these challenges and bring a new form of containers to users and developers. In addition, he will briefly talk about image formats and the management of images without privileges as well.
About Aleksa: Aleksa Sarai is a maintainer of runC, and a long-time contributor to Docker. In addition, he's contributed to the Linux kernel as part of his work on containers. He works on the containers team at SUSE, maintaining Docker and related software for both SUSE Linux enterprise and openSUSE; he is also committed to working in the open, and is a strong proponent of Free Software.
Container Camp is the community conference about software containers and is Australia's first conference dedicated to container technology.
Captured on 22-24 May, 2017 at the SMC Centre. Sydney, Australia
Essentially all popular container runtimes require some form of root privileges in order to create and manage containers. This becomes a problem for certain systems, where administrators are hesitant to install any software, let alone a container runtime -- many of which allow for privileged containers without authentication.
In this talk, Aleksa Sarai will describe recent work done within runC by himself and other maintainers to allow people to use rootless containers with a well-supported container runtime, as well as discussing challenges discovered by this work and kernel work which is being done to alleviate these challenges and bring a new form of containers to users and developers. In addition, he will briefly talk about image formats and the management of images without privileges as well.
About Aleksa: Aleksa Sarai is a maintainer of runC, and a long-time contributor to Docker. In addition, he's contributed to the Linux kernel as part of his work on containers. He works on the containers team at SUSE, maintaining Docker and related software for both SUSE Linux enterprise and openSUSE; he is also committed to working in the open, and is a strong proponent of Free Software.
Container Camp is the community conference about software containers and is Australia's first conference dedicated to container technology.
Captured on 22-24 May, 2017 at the SMC Centre. Sydney, Australia
