On: Roundcube open-source webmail software merges with...

[apitman]

So you pass in the docker socket and the AIO container runs docker commands on the host?

[t-writescode → apitman]

That is correct, yes.

[teekert → t-writescode]

It sounds a bit like using the same password for all your services... Hack a Nextcloud instance, gain root on any system through Docker,

[apitman → teekert]

I would assume (hope) that the AIO container itself is not exposed to the internet, only some of the containers it starts.