Hacker News Reader

Comment by gruez | Hacker News Reader

>when it’s a very common setup to add regular user to the docker group.

As an official configuration? Or in random copy paste guides? The former is very different than the latter. It's not uncommon to disable sudo passwords, but it would be considered a serious security lapse if that were the default on some OS.

View on HN

Adding your user to the docker group is in the official Docker install instructions, I wouldn't call that "random copy paste guides".

You mean the optional post install instructions, which is a separate page from the main install instructions, and contains a giant warning about the security implications?

https://docs.docker.com/engine/install/linux-postinstall

If the official sudo project had a guide on how to disable passwords, that shouldn't be taken as endorsement of having that as a default config.

Per my other comments, it does not really matter if you disable the sudo password or not. If you have a sudo binary at all you effectively are giving every user process root since malware can mask the sudo command and intercept the password so trivially.

The methods are described on the official docker website, not just random blogs or SO pages. There are caveats about security, of course, but it's not truly discouraged.

I think there are notes that warn you about the consequences. And they have been written with sys admin in mind which knows about user groups and security.

You mean, just how it is on Windows?

Reply on news.ycombinator.com