4 ms·

Can you elaborate on what part of docker is a security nightmare?

• kccqzy 4y ago
  Dockerd is a daemon that runs with very high privileges and does too many things. People hate using "sudo docker" so they add themselves to the docker group. Now congratulations you are effectively running as root all the time.
  • ccouzens 4y ago
    On Windows and Mac docker is run in a virtual machine without full access to the host's files so root is less of a problem. Even though docker runs natively on Linux, perhaps a similar vm setup can be achieved for security reasons. I use Podman on Linux which is compatible with docker but without the root issue.
  • znpy 4y ago
    There’s podman for that, it runs in rootless mode very well.