Some online Docker literature suggests creating a new Docker container (e.g., the “docker run” command) with these two options:
–net=host –privileged=true
There are some caveats with these flags. First, if you use them, within your container you can make changes to the Docker server itself.* For some applications, this defeats Docker’s purpose. Secondly, if the application you run in Docker becomes compromised, the entire host could be vulnerable to an attack through the Docker container.*
…
Continue reading “Concerns About Creating a Docker Container With Optional Flags”