From f87ca4badab3f32be48934de910ca56e84c42e77 Mon Sep 17 00:00:00 2001 From: Raniere Gaia Costa da Silva Date: Tue, 4 Nov 2025 09:41:29 +0100 Subject: [PATCH] Add item to FAQ regarding rootless mode Closes https://github.com/jupyterhub/repo2docker/issues/1483 --- docs/source/faq.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docs/source/faq.md b/docs/source/faq.md index 43187b89..f9c08309 100644 --- a/docs/source/faq.md +++ b/docs/source/faq.md @@ -5,6 +5,13 @@ A collection of frequently asked questions with answers. If you have a question and have found an answer, send a PR to add it here! +## Is rootless container runtime supported? + +To to mitigate potential vulnerabilities in the daemon and the container runtime, security experts recommend run Docker in [rootless mode](https://docs.docker.com/engine/security/rootless/). Rootless mode is supported by `repo2docker` but it has some limitations: + +- `repo2docker` does not allow the primary user in the image to be `root`. +- the `--editable` feature will not work because of permission issues. + ## Why is my repository failing to build with `ResolvePackageNotFound` ? If you used `conda env export` to generate your `environment.yml` it will generate a list of packages and versions of packages that is pinned to platform specific versions.