In my opinion the biggest advantage of podman is that it uses pods with basically the same config and behavior as kubernetes does. As long as you just use podman pods instead (or possibly via) compose files you likely just notice that only the pod has one (and not any more) veth interface, that you reach other containers inside a pod via localhost:$port (instead of $service-name:$port) but when you switch later on to kubernetes you are already familiar with some basics.
Why would an adversary being able to execute code as root on a personal computer be a bigger threat than their being able to execute code as non-root? Surely just about any of the stuff that a malicious hacker might want to do to someone's personal computer can be done without root... right?
With a user shell, I can grab their browser data, personal documents, and try to set up persistent background daemons that listen on programs and do keylogging/screenshotting (harder on Wayland than it was on X11).
With root, I can read all program memory, try to extract decryption keys for encrypted filesystems, modify the kernel, punch open backdoors, modify any arbitrary program, read all user files, etc.
A notable extra issue is the rise of AI agents, which often eagerly test the boundaries of every sandbox they are placed within. I would not run an AI agent as root, nor would I give it full access to a rootful container runtime.
Read up on basic user based security. Multiple users can exist on a system, each with its own resources, root/admin can effectively affect any user, so breaking the user-root barrier could allow a user to affect other users.
Originally users meant actual people, but in modern systems users can belong to subsystem, so for example an HTTP server with a website may have its own user, but a mail system could have another, so a breach in the website system would be confined to said user. Going from user to root is called a Local Privilege Escalation and would allow a breach from the website to metastasize into the mail system.
8 comments
[ 3.8 ms ] story [ 19.0 ms ] threadWith root, I can read all program memory, try to extract decryption keys for encrypted filesystems, modify the kernel, punch open backdoors, modify any arbitrary program, read all user files, etc.
A notable extra issue is the rise of AI agents, which often eagerly test the boundaries of every sandbox they are placed within. I would not run an AI agent as root, nor would I give it full access to a rootful container runtime.
Yes, of course there are still users out there that execute all software under the same account.
Inability to use the tools at hand to protect your data is not a technical issue.
https://en.wikipedia.org/wiki/Time-sharing#Security
Read up on basic user based security. Multiple users can exist on a system, each with its own resources, root/admin can effectively affect any user, so breaking the user-root barrier could allow a user to affect other users.
Originally users meant actual people, but in modern systems users can belong to subsystem, so for example an HTTP server with a website may have its own user, but a mail system could have another, so a breach in the website system would be confined to said user. Going from user to root is called a Local Privilege Escalation and would allow a breach from the website to metastasize into the mail system.
Are people really terminally online enough to understand this?
OpenMandriva would be my next guess, but it's not a newer distro.