Volume that is encrypted and not accessible by host? Volume that is encrypted and not accessible by host? docker docker

Volume that is encrypted and not accessible by host?


No.

Docker is not a VM tool, it runs an application with isolation (namespaces) and resource limits (cgroups) applied. The host processes, running on the same kernel, do not run with these limits, and can therefore see the contents of the container. And even if limited from view somehow on the host, root on the host (along with any user in the docker group) can enter the namespace of the container.