I'm attempting to build several containers, each running service daemons like firewalld, ntpd, etc. I've read a lot about how using the --privileged flag basically negates the purpose of Docker containers and isn't secure. How do you run these services in a container without privileges? I'm attempting to use the centos:latest Docker image.
Thanks.
firewalld
is going to have to be able to access the packet filter, which is in kernel space, so that's going to have to run privileged.