Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Can you elaborate on what part of docker is a security nightmare?


Dockerd is a daemon that runs with very high privileges and does too many things. People hate using "sudo docker" so they add themselves to the docker group. Now congratulations you are effectively running as root all the time.


On Windows and Mac docker is run in a virtual machine without full access to the host's files so root is less of a problem.

Even though docker runs natively on Linux, perhaps a similar vm setup can be achieved for security reasons.

I use Podman on Linux which is compatible with docker but without the root issue.


There’s podman for that, it runs in rootless mode very well.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: