There are recommendations to run processes as a non-privileged user within the docker container:
[...] run your processes as non-privileged users inside the container
One reason I can see is that an attacker who got access to the container can install malicous software. However, I run my container with read-only root file systems. So this does not make a difference to me.
Given that I use a
read-only root file system, is there any other reason why using a non-root user inside the container would make sense?
To clarify: I am NOT asking about running the docker deamon/starting the container as a non-root user.