5 ms·
We enforced that by giving our devs linux workstations with no sudo rights (iso27001 requirement), but they have access to the docker daemon, and MUST install e
by thawkins 8y ago
We enforced that by giving our devs linux workstations with no sudo rights (iso27001 requirement), but they have access to the docker daemon, and MUST install everything they need in docker images, its massively increased tools sharing between teams, and forced people to learn docker. We have some devs starting to use kubernetes locally using minikube .
- rehemiau 8y agoSorry for being off-topic but do you have any links or tips on how to achieve this? My understand was that adding a user to the 'docker' group gives him 'sudo'-equivalent rights.
- asfdsfggtfd 8y agoYou can set it up so that the user doesn't have to type sudo docker. But they still effectively have root access via docker. I guess it gives some social pressure not to do superuser things?
- de_watcher 8y agoIt looks like a package manager choice. Dpkg/Apt isn't doing by default what they actually need, so they use Docker instead.
- alexandre_m 8y agoYour devs can pass --privileged to docker run, that gives them root.