Why does adding user to docker user group allows docker to be run as non root? -
docker needs root permissions run. this guide gives instructions managing docker non-root user, adds user docker user group after i'm able run docker commands sudo. can explain why work?
you have distinguish between docker command line tool docker , background daemon dockerd. daemon runs root , responsible running containers. command line tool docker gives daemon instructions, do. communication done via unix socket /var/run/docker.sock default. ls -l yields
srw-rw---- 1 root docker 0 aug 20 11:22 /var/run/docker.sock you can see user belongs group docker able write socket , able give daemon instructions can executed root permission.
you can configure daemon listen on network port instead. can tell command line tool use remote docker daemon via environment variable docker_host. doing can give instructions docker daemons on remote hosts.
there point 1 should mention. when add user group using sudo, , execute other commands sudo, sudo not prompt again password, because cache time.
Comments
Post a Comment