Running something in subuser is no more of a binary blob than installing it through apt-get. Indeed, it uses apt-get by default! <a href="https:&#x2F;&#x2F;github.com&#x2F;subuser-security&#x2F;subuser-default-repository&#x2F;blob&#x2F;master&#x2F;iceweasel&#x2F;docker-image&#x2F;SubuserImagefile" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;subuser-security&#x2F;subuser-default-reposito...</a>