This blogpost delves into the critical distinctions between a root process running on a host and one operating within a container. Understanding this difference is a fundamental aspect of comprehending and strengthening container security.

https://www.armosec.io/blog/root-process-vs-containerized-root-process/