4 ms·
That's why adding your user account to the docker group is a separate step that explicitly does not happen as part of the installation: https://docs.docker.com/
by Ajedi32 5mo ago
That's why adding your user account to the docker group is a separate step that explicitly does not happen as part of the installation: https://docs.docker.com/engine/install/linux-postinstall/ https://docs.docker.com/engine/install/linux-postinstall/
> Warning
> The docker group grants root-level privileges to the user. For details on how this impacts security in your system, see Docker Daemon Attack Surface.
- amelius 5mo agoAnd containers were supposed to make things safer ... Huge design mistake if you ask me.
- halfcat 5mo agoContainers were never a security boundary
- twelvedogs 5mo agoi don't see how it's a design mistake, linux allows more footguns in general to not decrease utility. Allowing you to manually give root prompt access (with warnings!) to a non-root user is one of them. you can also just not run docker as root and not add normal users to the docker group
- otabdeveloper4 5mo ago> And containers were supposed to make things safer ... No. Containers are a slight improvement over the .tar.gz software distribution method we had a few decades ago. (And I mean "slight" literally - a Docker container is just a .tar.gz with a bundled bash script that runs in a chroot.)
- HeWhoLurksLate 5mo agowait so just being lazy and using sudo on Docker commands instead of figuring things out actually means I'm being safer? awesome.
- SpaceNoodled 5mo agoThis feels like using Docker is just inherently unsafe.
- itintheory 5mo agoThis feels like using sudo is just inherently unsafe.
- alsetmusic 5mo agoThis feels like using a computer is inherently unsafe. On the plus side, once we outlaw them we'll shut down the ability for conspiratorial thinking to spread easily and the world will slowly heal from the last couple of decades (the previous one in particular). Hooray! We're finally doing something about the harms of social media. Smash your computer today!
- LeFantome 5mo agoSafety meeting. Nobody works, nobody gets hurt.
- b65e8bee43c2ed0 5mo agoI think we're only a few decades away from these things being said unironically.
- TheRoque 5mo agoIt's already here, mobile OSes are just computers with ton of guardrails and you can't do whatever you want with it, for the sake of security. I mean we almost got an Android where you can't install the APK you want.
- rmunn 5mo agoWhere's that guy with the ButlerianJihad username when you need him?
- jatins 5mo agoWell in 2026 most likely this step was also done by an agent with --dangerously-skip-permissions