rootless

backstory Recently I helped someone out online (by providing a tiny pointer) with rootless containers and I realized that I might have some useful pointers (bits and bobs). These are somewhat related to my previous blogpost about JFrog - Xray and Insight. In the last couple of years, I have had experience with running OCI (Open Container Initiative) compliant rootless containers with podman rootless and sometimes with docker rootless. Most docker-compose files and how to’s online focus on the root full variants, which you definately do not want.

JFrog is probably mostly known, because of their software product: Artifactory (artifact management software). But they also provide other pieces of software which integrate with Artifactory. For example they have XRay (security essentials) and Insight (DevOps intelligence tool). Recently I was able to play around with both XRay and Insight (together with a good friend) to get those Java tools to run on a hardened Linux server, as a proof of concept.