On 01/06/2017 08:46 AM, Matthew Miller wrote:
On Fri, Jan 06, 2017 at 12:57:58PM -0000, Trishna Guha wrote:
> I have recently worked on accessing Docker Daemon of Fedora Atomic host from local
machine which is fully automated by Ansible Playbook.
> Keeping security in mind TLS server and client certs are generated.
> The idea is to use Docker daemon of atomic host remotely.
> Kindly let me know if you like the idea :-). I would like to publish a post on the
same.
> I am open to ideas.
+1 sounds great
Make sure that you point out that ANY process on the client that can
access the TLS certs now has FULL root on the server and can do anything
it wants on it.