thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Advanced

Rootless Container

A container run by an unprivileged user, using user namespaces so root inside the container maps to a non-root host user.

Definition

Rootless containers limit damage from container escapes. Podman supports it by default; Docker supports rootless mode. Running processes as a non-root USER inside images is a related best practice.

Example

podman run as a regular user maps container UID 0 to the user's subordinate UID range.

Exam tip

Running containers as root is a common security finding; prefer rootless and non-root users.

Related terms