Quote from: mocacinno on May 30, 2025, 01:40:14 PM

Quote from: ABCbits on May 28, 2025, 10:48:08 AM

Since i notice docker is fairly popular option to run self-hosted Bitcoin node and other Bitcoin program, people also should know that Docker have major security implication. As explained on https://unix.stackexchange.com/a/607852, anyone who can access docker effectively have root (a.k.a. admin) access.

The solution is already in the stackexchange discussion: podman... Podman can run under an unprivileged user. You can even go as far as creating multiple unprivileged users and have each user run it's own container (eventough i did not test this setup myself).

Yeah, i've read the solution mentioned on link i included. But podman (along with docker rootless mode) isn't popular enough where AFAIK it's rarely mentioned outside security discussion.