Can you give me such examples?
Do you mean non-root user inside container? or run docker daemon as non-root?
We wish to allow users to install their own packages in the containers.
If the file system access is limited by default by Docker, what additional security AppArmor can offer? I am not very experienced with AppArmor but what I know is that it runs based on matching file patterns etc.
(On a container there’s already a different file system which users shall have full access to)
Also I’m quoting your reply from another thread:
When you say ‘use docker’ do you mean launching commands like ‘docker run’ on host.
or accessing the container terminal directly?
The reason I ask is that we’re giving clients direct access to the container terminal (through browser based terminal) and not the host.