@Vijin Palazhi In Lecture it is mentioned that if a container is running with ro . . .

Kubernetes-Slack Discussions
#1

Tanumoy Ghosh:
@Vijin Palazhi In Lecture it is mentioned that if a container is running with root then it can’t be immutable, then how the last question of Mock Exam 3 mark solaris pod to be immutable

image.png
image.png1293×341 50.9 KB

#2

Tanumoy Ghosh:
This is what written in solution:

Pod solaris is immutable as it have readOnlyRootFilesystem: true so it should not be deleted.
Pod sonata is running with privileged: true and triton doesn’t define readOnlyRootFilesystem: true so both break the concept of immutability and should be deleted.

#3

Tanumoy Ghosh:
Extracted from lecture:

image.png
image.png1104×586 182 KB

#4

unnivkn:
@Tanumoy Ghosh could you please share the Solaris pod yaml ? Is there any RunAsUser: root or 0 mentioned ? or any privileged: true ?

#5

Tanumoy Ghosh:
In the Solaris pod yaml - only privileged: false is mentioned, no mention of runAsUser , that means it would run with root user by default as I have shown in the screenshot attached with the primary post which proves that the container is running with root user