5.2.3 Accessing the Host's Process ID Namespace

You can make the host's process ID namespace visible from inside a container by specifying the --pid=host option to docker run. A suggested use of this mode is to debug host processes by using containerized debugging tools.


Host mode is inherently insecure as it gives a container full access to D-Bus and other system services on the host.