linux container

Docker daemon running as root by default is a serious security risk: if a container is compromised, an attacker can escalate privileges to take over the entire server. Rootless Docker solves this at the source — running both the daemon and containers inside an ordinary user namespace, with no root privileges required at any stage.