4 ms·
You can use authorization plugins to control what commands are allowed. However generally you don't give people access to run any docker command in production,
by justincormack 10y ago
You can use authorization plugins to control what commands are allowed.
However generally you don't give people access to run any docker command in production, you have some system that lets them deploy containers with predetermined settings, which don't include being able to set --privileged or add capabilities or change security policies.
- shriphani 10y agoI am currently running docker with a systemd script (it seemed like a reasonable idea at the time). But docker = sudo without password essentially. So I am curious if there is a recommended way to run a service with a docker run.