Question 1

What does docker run do?

Accepted Answer

Run a container Creates and starts a container from an image.

Question 2

Is docker run dangerous?

Accepted Answer

HIGH risk. Containers can mount host paths, use host networking or run privileged. --privileged, -v /:/host and -v /var/run/docker.sock grant host-level control. Pin image tags/digests; avoid :latest. Don’t pass secrets with -e — use secrets or env files with strict permissions. Run as non-root (--user) and drop capabilities (--cap-drop ALL).

Question 3

How can I use docker run more safely?

Accepted Answer

docker run --rm --read-only --cap-drop ALL --security-opt no-new-privileges <image> — Hardened run options

Flag	Meaning
`-d`	Detached
`-p`	Publish port host:container
`-v`	Mount volume or host path⚠ Mounting / or the Docker socket gives host control.
`--rm`	Remove container on exit
`--privileged` `--privileged`	Full host access⚠ Disables isolation.
`-e`	Environment variable⚠ Visible in docker inspect.
`--network host`	Host networking⚠ Bypasses network isolation.
`--user`	Run as user