Hardening a Docker Container: From Root to Least-Privilege in 8 Steps
By default, a Docker container runs its process as root, with a broad set of Linux capabilities, on a writable filesystem, able to make almost any syscall. That's convenient for getting started and te
blog.devopsaitoolkit.com4 min read