3 ms·
On servers, yes, rootless doesn't make much sense. But on on my dev laptop, "sudo docker" is tiring and adding docker to the sudoers group is a big security hol
by awoimbee 4y ago
On servers, yes, rootless doesn't make much sense.
But on on my dev laptop, "sudo docker" is tiring and adding docker to the sudoers group is a big security hole (why does everyone seem to think that "docker run" giving root privileges is ok ?!).
- candiddevmike 4y agoYou should add yourself to the docker group...
- rcxdude 4y agowhich has the same effect, the docker group effectively has root access.
- Bayart 4y agosudo usermod -aG docker $USER
- prmoustache 4y agothis is not safer.
- moody5bundle 4y agothis is the same as: %wheel ALL=(ALL) NOPASSWD: ALL effectively disabling sudo completely.
- snorremd 4y agoThis indeed. The Docker team should not include the "adding your user to the docker group"-section in the install documentation. It is very unsafe and even though they link to a document on security implications I don't think all users will truly grasp the implications. Better to hide this feature and promote the rootless docker mode for local use. On servers you won't be adding any unprivileged user to the docker group in any case.