Assuming i’m running prefect agent on EC2 (for our PoC), is there any clear advantage to running a docker agent vs. a local agent? also, is it possible to use

rootless mode

for the docker (to increase security), or will it hinder Prefect in anyway? https://docs.docker.com/engine/security/rootless/

Docker agent will create a container for your Flow so if you have multiple flows that need environment isolation, docker agent provides that. I think docker agent uses

dockerpy

which just uses whatever is configured when you do

docker run …

but couldn’t a local agent also have flows with a run-config that is docker (i.e. - use containers on a need-basis)? or can local agent only run localruns?

A local agent won’t be able to pick up Flows with a DockerRun

which i was led to from here: https://docs.docker.com/engine/install/linux-postinstall/

Have you seen this ?