I'm trying to run a docker container (for security reasons) from which I want to see a GUI application.
I'm between two options at the moment, I'm not sure if I should forward its traffic to my X server (1) or run an X server inside of the container and then connect to it (2).
My current solution is (1), however I'm concerned about security. Assuming the container is authenticated in my host machine's server could it, for e.g:
- grab my mouse and keyboard input when interacting with other applications
- could it query for information regarding other windows? or know their state at all?
EDIT: If any of the above were to be true, would (2) solve it?