google / google/gops

Any restrictions on rootless containers?

Open
#222 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
7k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

Hi,

we have `gops` installed along the main binary in a container in a number of containerized services. The binary sets up `gops` agent, so the tool can communicate with running program over a TCP port. We would like to switch to rootless containers, so after that both service itself (running an agent) and `gops` will be run without root privileges.

Does running without root affect `gops` mechanics in any way (like accessing `/proc` for some specific metrics)? If there are any specific capabilities required, could you please point out which ones?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.