This only works if you trust all your docker images and audit them for root proc...

fulafel on March 13, 2019 | parent | context | favorite | on: Rebuilding My Personal Infrastructure With Alpine ...

This only works if you trust all your docker images and audit them for root processes. Even then you still have setuid binaries and other privilege escalation risks, if you inherit from dockerhub images etc.