Hacker News Reader

The user using this has to be in that group, the programs being run do not.

For a single-user machine, it may be okay. But I don't trust Docker's security very much.

any particular reasons you don't trust Docker security?

The daemon has had many security issues. They also only recently grew support for ACLs (which are only available as plugins), so any user that can write to the Docker socket is essentially equivalent to root.

Reply on news.ycombinator.com