Glossary term
What is Linux capabilities? Meaning for developers
Small slices of root's power; containers get a reduced default set and you can drop them all with --cap-drop ALL.
Learn it properly · Docker & KubernetesLesson 2: Volumes, Networks and Running Containers SafelyPersisting data, bind mounts, networks and ports, environment variables and secrets, non-root users and other safety habits.