0

We have some systems where users are using Docker in userspace to run development environments. These containers sometimes leave files and directories behind that cannot be deleted directly by the users because they were created by other userids inside the container. To make it easier to remove these files we have been asked to install lxc-usernsexec. In Ubuntu this is provided by the package lxc-utils, which contains several other binaries that are used to run and manage lxc containers.

I noticed that lxc-create doesn't work when I stop and disable the lxc.service systemd unit, but I'm not sure if this is enough.

Is it safe to install this package when I disable the service, or could it be used by regular users to gain root access to the host?

0 Answers0