install docker as rootless docker to avoid root elevation #8293
perfecto25
started this conversation in
Suggestions
Replies: 1 comment
|
Would also be nice if peoples first experience with docker on omarchy wasnt
|
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
on current omarchy 4.1 - a non root user who is in docker group can elevate to root via known docker exploit
omarchy should ship a secure docker env using rootless docker configuration
ie sock should be like this
srw-rw---- 1 root docker-users 0 May 5 14:35 docker.sock
this is script I use on fedora to setup rootless docker
any user who needs docker access is added to docker-users group, not 'docker' group
install-rootless-docker.sh
All reactions