From fd8c8c77636de99b87f93d79228423651654a7c1 Mon Sep 17 00:00:00 2001 From: Hardcore Sushi Date: Wed, 31 May 2023 10:46:29 +0200 Subject: [PATCH] Explain workstation risks --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 5393f5c..11d3dd6 100644 --- a/README.md +++ b/README.md @@ -13,11 +13,13 @@ Containers share the same kernel as the host. This means that if someone manages - Container processes cannot gain additional privileges (`--security-opt=no-new-privileges`) - The entry point is executed with normal user privileges +The risk on the workstation side depends on the guest OS, on the hypervisor used and on the interactions between the host and the VM (filesystem sharing, hardware passthrough, etc.) + # Use it ! Install dependencies (debian-based): ``` -sudo apt-get install libvirt-daemon libvirt-clients podman bridge-utils +sudo apt-get install libvirt-daemon libvirt-clients podman ``` ## Download