You can enable user namespace isolation, but it comes with a significant number ... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

dharmab on May 4, 2020 | parent | context | favorite | on: Why strace doesn't work in Docker

You can enable user namespace isolation, but it comes with a significant number of tradeoffs.

https://docs.docker.com/engine/security/userns-remap/

Also, Kubernetes doesn't support it.

https://github.com/kubernetes/enhancements/issues/127

jbverschoor on May 4, 2020 [–]

Docker, mongo, MySQL, JavaScript

Insane defaults, but easy to get started without knowledge

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact