Comment on Podman: Issues with multiple users running containers simultaneously
Overspark@piefed.social 1 week agoIt can be run as root, but it doesn’t have to, as it is only accessing the host network, not any user-specific network. Crossing the boundaries from host network to user-specific networks is left to the reverse proxies running as those specific users.
Port 80 can normally only be bound as root, but you can work around that with either firewall rules or by using something like this in your sysctl config:
net.ipv4.ip_unprivileged_port_start = 80
lambalicious@lemmy.sdf.org 14 hours ago
Do NOT do the latter! It allows unprivileged users in the system to spawn processes to take privileged ports starting with port 80 all over to port 1024, including relevant ports like 443 (HTTPS)!