Cloud Foundry Summit North America 2018

Rootless containers are a new and exciting development in the container community, offering up the ability to create and manage containers as completely unprivileged, non-root users. This is hugely appealing both in terms of security, as well as making container-based workloads more accessible to a much wider audience.

Over the past few months the Cloud Foundry Garden team have been working to bring support for rootless containers to the platform. This talk will focus on how and why we went about doing so, including a technical overview of what rootless containers are, why they’re important and how we make use of them inside Cloud Foundry.

The talk will also discuss Cloud Foundry’s use of the Open Containers Initiative (OCI) standards, and how the platform has benefited from new features, such as rootless containers, by adopting them.