4 votes
Accepted

Blacklist network ranges Docker is allowed to use for its containers (swarm mode)

Docker should avoid using a network if there's a route to that network (see ip r). You can whitelist networks that docker is allowed to use with configurations in several places: You can adjust bip ...
BMitch's user avatar
  • 3,300
3 votes
Accepted

Is the root user in a Docker image/container the same as the root user of the machine?

No the root in container is a root-user of container. Remember containers runs isolated. DOcker uses cgroups and libvirt of kernel linux.
Vader's user avatar
  • 466

Only top scored, non community-wiki answers of a minimum length are eligible