[Podman] Re: 2 Questions re a Container having access to the Host's file system

Scott McCarty <smccarty@redhat.com> writes:

Personally, I also run systemd in the container (because I hate reverse engineering startup scripts) and I run the whole thing read-only. IMHO, thisngives me a balance of security and convenience.

If you don't run systemd, you could even run rootless.

systemd should work fine with rootless containers too. Giuseppe