4 ms·

Do the Docker containers that builds run in still provide root access to the Docker socket, allowing people to break out of the container?

• thebloodrabbit 10y ago
  You have passwordless sudo access on the Docker containers, however when you kick off a new build we will create a new VM just for the build and start the docker container inside it, making sure that nobody can ramble around :)
  • christop 10y ago
    Thanks. Is this setup with the per-build VM and Docker server access intended so that users could set up multiple linked containers for integration testing, etc.?
    • birmacher 10y ago
      Yup, we wanted to give you full access during the build, to achieve whatever you would like to do.