By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Custom container not running under root account?

0

A customer wants to enforce these rules in their custom SageMaker containers:

•	Processes running inside a container must run with a known UID/GUID and never as root.
•	Avoid using privilege escalation methods that grant root access (e.g. sudo)

How do we ensure this?

Topics
Machine Learning & AI
Tags
Amazon SageMaker
Language
English
EXPERT
Mahesh_V
asked 3 years ago575 views
1 Answer
0
Accepted Answer

SageMaker requires that Docker containers run without privileged access. See: https://docs.aws.amazon.com/sagemaker/latest/dg/amazon-sagemaker-toolkits.html SageMaker Docker containers do not run in Privileged mode and have the following Linux capabilities removed: SETPCAP, SETFCAP, NET_RAW, MKNOD

EXPERT
Mahesh_V
answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content