Dangerous
docker run --privileged -v /:/host -it alpinecross-platform · bash · Advanced
Starts a container with full host capabilities and the entire host filesystem mounted inside it. This is container escape by configuration: anything done under /host inside the container is done to the real machine as root.
Signals to notice
- --privileged removes container isolation
- Host root filesystem mounted read-write
- Equivalent to root on the host
Think you can spot these under time pressure?
Start TrainingMore Containers
docker exec -it web shExpertdocker run -v /var/run/docker.sock:/var/run/docker.sock -it alpineAdvanceddocker run -d --restart=always -v /:/mnt alpine sh -c 'sleep infinity'Expertdocker run --rm -v "$PWD":/work:ro -w /work node:20-alpine npm run lintNightmaredocker exec app-1 cat /app/logs/startup.logIntermediatesudo docker run --privileged -v /:/host node:20 node /host/srv/app/fix.jsAdvanced