I wrote a blog a couple of years ago about the docker group.

http://www.projectatomic.org/blog/2015/08/why-we-dont-let-non-root-users-run-docker-in-centos-fedora-or-rhel/

I am not a big fan.

On 10/18/2016 04:39 AM, Stef Walter wrote:
On 11.10.2016 17:32, fasebetav1@gmail.com wrote:
Hi list. I have two servers with the same version of cockpit
installed (0.114). One appears in the section Container Administrator
roles and the other not? it can be? Thank you 
The 'Container Administrator' role is the 'docker' group. If it doesn't
exist on the system, then those access rights cannot be conferred on a user.

By the way the 'docker' group has dubious security value. It is
essentially a root equivalent group without authentication or logging.
Use at your own risk. The official Docker documentation has warnings
about it.

Relatedly I've put together a pull request which shows the group in
question as a tooltip when hovering over the role:

https://github.com/cockpit-project/cockpit/pull/5173

Stef



_______________________________________________ cockpit-devel mailing
list -- cockpit-devel@lists.fedorahosted.org To unsubscribe send an
email to cockpit-devel-leave@lists.fedorahosted.org




_______________________________________________
cockpit-devel mailing list -- cockpit-devel@lists.fedorahosted.org
To unsubscribe send an email to cockpit-devel-leave@lists.fedorahosted.org