Why You Should Never Run Containers as Root

TL;DR Root inside a container is UID 0 on the host kernel. The namespace hides the host filesystem, it does not hide your privileges. A container running as root with a volume mount can read and wri