does the docker:dind-rootless have to run with --privileged?

[gyh9457]

I do not want to run with --privileged, but i get an error : [rootlesskit:parent] error: failed to start the child: fork/exec /proc/self/exe: operation not permitted

[wglambert]

You still need --privileged #151 (comment)

You'll also want the command set to --experimental for dockerd#281 (comment)

Like docker run -it --rm --privileged docker:dind-rootless --experimental

[gyh9457]

thanks @wglambert

[mo-saeed]

@wglambert Perfect thank you, it works :)

I just have one question, running the container here as privileged expose the same risk as any other containers running as privileged or this is different? I just want to understand the risk here.

[wglambert]

Yeah it's essentially the same risk. Maybe a little bit minimized since rootlesskit provides a layer of security, but --privileged by nature gives the container all the capabilities as the host https://containerjournal.com/topics/container-security/why-running-a-privileged-container-is-not-a-good-idea/

In the future questions like this should be asked over at the Docker Community Forums, Docker Community Slack, or Stack Overflow. Since these repos aren't really a user-help forum