On 11/30/2019 at 8:33 PM, xanvincent said:

The PGID and PUID commands map to an internal user (abc) within the container that runs and owns files for whatever app. Root still exists there (in the container) and that's the problem. Root id in container = root id outside of container. 

 

Implementing userns is THE fix for this security concern but has to be implemented at the command line when the container is run.

I am hoping to move Joomla (CMS) built sites to my unraid build and expose to the internet. Reading up on name spaces, so i can implement docker containers safely. Anyone have any suggested reading or experience from doing the same or similar setup?

Split into its own topic to keep responses on-topic.