Running a Docker container process as root inside the container is considered insecure. But I have some doubts that I need to clear:
Is it still the same kind of insecure even if the container cannot mount the docker socket or any part of the root file system from the host?
Is it still the same insecure if there is a one-to-one mapping of a container and virtual machine? For example, you are running just one container per VM?
Is it still insecure if the container is not running as privileged?
What's the difference between running as root and as privileged?
Apart from the above, is there some simple way to fake root? How can we map the user id 0 to be something like a bigger number 1001 on the host?