[fragmede]

When they can't run sudo, they'll user docker to give themselves root.

https://twitter.com/i/status/2060746160558543217

[cyberax]

That's why everyone should use rootless Podman. It doesn't need anything apart from subuid/subgid binaries.