Description
Helps implement rootless containers by providing a fake-root environment without requiring full root privileges. It is useful for container engines and users who want isolated container workflows with reduced privilege requirements.
Rootless containers reduce some risks but do not remove all isolation and filesystem concerns. Review mounts, networking, user namespaces, and exposed files before running untrusted workloads.