3 ms·
In default docker installation on most Linux boxes, communication to docker socket itself requires elevated privilege. You can't even do `docker ps`. In jobs I
by gnufied 8y ago
In default docker installation on most Linux boxes, communication to docker socket itself requires elevated privilege. You can't even do `docker ps`.
In jobs I held - people who can pull images and run container on servers, they also could install stuff if they wanted. Is running privileged containers blocked? It just seems something broke down in engineering process, if developers has to bypass admins to install stuff on a server. What happens if that server crashed and burned?
- Spivak 8y agoAccess vs authorization. You can use docker to get yourself local root. If you do it and admins find out you'll be in hot water.