3 ms·
Mounting the docker socket into a container works. If it's advisable is another question, as that gives full control over all other containers (and likely more
by johannes1234321 5y ago
Mounting the docker socket into a container works.
If it's advisable is another question, as that gives full control over all other containers (and likely more)
- staticassertion 5y agoMounting the docker socket makes it trivial to escape to the host since you can just launch a privileged container or mount arbitrary files. Plus the daemon generally runs as root. At that point you may want to just run it on the host, but basically you'd better trust whatever it is.