6 Rootless containers

In this chapter, you will take a deep dive into what is going on when running Podman in rootless mode. I believe it is helpful to understand what is happening when you run rootless containers and learn about the problems that running in rootless mode can cause. With the introduction of containerized applications over the last few years, certain highly secure environments were not able to take advantage of the new technology.

6.1 How does rootless Podman work?

6.1.1 Images contain content owned by multiple user identifiers (UIDs)

6.2 Rootless Podman under the covers

6.2.1 Pulling the image

6.2.2 Creating a container

6.2.3 Setting up the network

6.2.4 Starting the container monitor: conmon

6.2.5 Launching the OCI runtime

6.2.6 The containerized application runs until completion

Summary