You are giving access to the docker socket (/var/run/docker.sock), so this container can create/edit/remove any container from your system, even add,edit, remove volumes or host path.

I have no idea if you can send modification API commands to a ReadOnly socket. I think you could, in the same way that you can do something with just HTTP-GET. Example: curl --unix-socket /var/run/docker.sock http:/images/json

Doc: https://docs.docker.com/reference/api/engine/version/v1.41/#tag/Container/operation/ContainerInspect

The article doesn’t comment the velocity: 16 T/s 🤷 You can see it in one of the article graph.

Good information here about EXO, and ChromeOS:

Neal Gompa (ニール・ゴンパ) 1 week ago

Is Exo going to continue to exist as a Wayland compositor? I figured it was going to be retired as ChromeOS turned into an Android overlay…

Fangzhou Ge 1 week ago

Yes, becoming Android overlay removes Chrome from the OS so Exo is going to retire. We still have to maintain Exo experience until the all ChromeOS device reach AUE or be updated to Android. Latest device AUE date I see are in 2033.

If folks don’t want Exo be listed we’ll just have Chromium here. Edited 1 week ago by Fangzhou Ge

Neal Gompa (ニール・ゴンパ) 1 week ago

I’m fine either way, if the Aura Shell is going to be around for a while, then it makes sense to include it.

I don’t even knowed that Chrome OS is/will be replaced by Android as an overlay.

TLDR; from MIT to GPL.