Is there a way to run redroid container without the --privileged flag? about redroid-doc HOT 4 OPEN

Yes, you can manually add required the capabilities (possible all) and required devices (cgroup rules).

from redroid-doc.

Take a look at #591

from redroid-doc.

But still, the docker container would run with elevated privileges, right?? In our use case, the container will run in a production environment, so we don't want the host machine to be at risk. Please share your thoughts.

from redroid-doc.

It can reduce some attack surface if get rid of --privileged.

BTW, I will check whether rootless container feasible. Check #659

from redroid-doc.