Preface
Running Docker as the root user will bring some potential harm and security risks, these risks include:
Container escape : If a container is running with root privileges and it contains a vulnerability or is abused by an attacker, the attacker may successfully escape the container and perform malicious operations on the host system. This can compromise the security of the host system.
Privilege escalation: When running Docker as the root user, processes within the container may attempt privilege escalation to obtain root privileges on the host system. This could lead to serious security issues, as attackers could exploit these privileges to take control of the host system.
File system access: Containers running as the root user can access the file system on the host system, which may lead to the leakage of confidential files or the corruption of files.
Network permissions: When a container runs with root permissions, network permissions may be abused, such as port scanning, DDoS attacks and other malicious behaviors.
To reduce these risks