Re: [CentOS-devel] docker group not exists in rpm

On 12/07/2015 10:24 AM, Farkas Levente wrote:

On 12/07/2015 05:17 PM, Jim Perrin wrote:

...

...

---

sudo usermod -a -G docker <your-user>

is this still valid?

Yes, but you first have to add the docker group yourself.

...

or how can an average user can run docker without sudo?

a simple "groupadd docker" will work, then restart the docker service and add your user to that group.

Note, it's *trivial* to escalate this to gain root on the host system, so using the docker group is essentially passwordless sudo.

but the name of the docker group is somehow hardcoded into docker itself?

Correct.