Rootless Docker in CI: worth the friction?

dedevtools_amy10 hours ago2 replies

Moved our self-hosted runners to rootless mode. Builds work, but port binding below 1024 and some overlay storage quirks bit us. Curious if others stuck with it.

Discussion

nunullroute9 hours ago

Stuck with it. Ports are solved with setcap or just not using low ports. The security gain on shared runners is worth it.

kckchen7 hours ago

Check that you're on overlay2 via the native rootless path, not fuse-overlayfs. Performance difference is noticeable.