Running the Traefik 3 Hardened Image (nonroot) on Podman: 3 Problems and Their Fixes
Docker Hardened Images (DHI) give you production-ready images with a small attack surface: no shell, no package manager, and — this is the part that confuses people the most — they run as a nonroot us