Ubuntu

Binary package “rootlesskit” in ubuntu mantic

  1. Mantic (23.10)
  2. rootlesskit

Linux-native "fake root" for rootless containers

 The purpose of RootlessKit is to run Docker and
 Kubernetes as an unprivileged user (known as "Rootless mode"),
 so as to protect the real root on the host from potential
 container-breakout attacks.
 .
 RootlessKit creates user_namespaces(7) and mount_namespaces(7),
 and executes newuidmap(1)/newgidmap(1) along with subuid(5) and
 subgid(5).
 .
 RootlessKit also supports isolating network_namespaces(7) with
 userspace NAT using "slirp".
 .
 This Debian package doesn't support vpnkit mode.
 .
 On Debian system, kernel.unprivileged_userns_clone should be enabled.

Source package