Docker - Revision history

Macmpi: /* Docker rootless */ add info on shadow-subids and XDG_RUNTIME_DIR

2025-12-06T12:30:35Z

Docker rootless: add info on shadow-subids and XDG_RUNTIME_DIR

← Older revision		Revision as of 12:30, 6 December 2025
Line 25:		Line 25:
	edit <code>/etc/rc.conf</code> and set <code>rc_cgroup_mode="unified"</code>. Then start the service on boot:		edit <code>/etc/rc.conf</code> and set <code>rc_cgroup_mode="unified"</code>. Then start the service on boot:

	rc-update add cgroups		rc-update add cgroups default

	Additionally, ~~the~~ <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].		Additionally, install {{Pkg\|shadow-subids}} package: <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].<br>
			Confirm [https://docs.docker.com/engine/security/rootless/tips/#advanced-usage <code>XDG_RUNTIME_DIR</code>] environment variable (and related directory) are [[Wayland#XDG_RUNTIME_DIR\|properly set]].

	Now docker can be start from an unprivileged user with		Now docker can be start from an unprivileged user with

2025-07-11T12:10:47Z

← Older revision		Revision as of 12:10, 11 July 2025
Line 16:		Line 16:
	addgroup ${USER} docker		addgroup ${USER} docker

	{{Warning\|Adding users to this group ~~will~~ is equivalent to granting them full root access on the host. [https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface See upstream documentation].}}		{{Warning\|Adding users to this group is equivalent to granting them full root access on the host. [https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface See upstream documentation].}}

	=== Docker rootless ===		=== Docker rootless ===

2025-03-14T18:52:48Z

add name of docker rootless binary

← Older revision		Revision as of 18:52, 14 March 2025
Line 28:		Line 28:

	Additionally, the <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].		Additionally, the <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].

			Now docker can be start from an unprivileged user with

			dockerd-rootless

	=== Docker Compose ===		=== Docker Compose ===

2025-02-14T14:19:18Z

Docker as root: improve security warning, add reference

← Older revision		Revision as of 14:19, 14 February 2025
Line 16:		Line 16:
	addgroup ${USER} docker		addgroup ${USER} docker

	Adding users to this group will~~, indirectly, grant~~ them the ~~capability to escalate privileges to that of the root user~~.		{{Warning\|Adding users to this group will is equivalent to granting them full root access on the host. [https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface See upstream documentation].}}

	=== Docker rootless ===		=== Docker rootless ===

2024-12-02T09:27:52Z

Docker as root: Mention security issue

← Older revision		Revision as of 09:27, 2 December 2024
Line 15:		Line 15:

	addgroup ${USER} docker		addgroup ${USER} docker

			Adding users to this group will, indirectly, grant them the capability to escalate privileges to that of the root user.

	=== Docker rootless ===		=== Docker rootless ===

2024-11-26T10:19:05Z

"WARNING: No {swap,memory} limit support": Remove instructions for Alpine 3.8 (EOL on • 2020-05-01)

@@ Line 62: / Line 62: @@
 You might encounter this message when executing <code>docker info</code>.
 To correct this situation, we have to enable the <code>cgroup_enable=memory swapaccount=1</code>
 === Grub ===

2024-11-26T10:18:07Z

Move link to ArchWiki into SeeAlso section.

← Older revision		Revision as of 10:18, 26 November 2024
Line 57:		Line 57:

	You'll find all possible configurations [https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file here].		You'll find all possible configurations [https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file here].

	~~== Example: How to install docker from Arch ==~~

	~~https://wiki.archlinux.org/index.php/Docker~~

	== "WARNING: No {swap,memory} limit support" ==		== "WARNING: No {swap,memory} limit support" ==
Line 113:		Line 109:
	* [https://www.erianna.com/creating-a-alpine-linux-repository/ Creating and Hosting an Alpine Linux Package Repository for Docker Packages]		* [https://www.erianna.com/creating-a-alpine-linux-repository/ Creating and Hosting an Alpine Linux Package Repository for Docker Packages]
	* [[Running Alpine in a Docker Container]]		* [[Running Alpine in a Docker Container]]
			* [https://wiki.archlinux.org/index.php/Docker Docker - ArchWiki]

	[[Category:Virtualization]]		[[Category:Virtualization]]

2024-11-26T10:16:20Z

Add subsection for docker as root

← Older revision		Revision as of 10:16, 26 November 2024
Line 5:		Line 5:
	apk add docker		apk add docker

	~~Connecting to the~~ Docker ~~daemon through its socket requires you to add yourself to the <code>docker</code> group.~~		=== Docker as root ===

	~~addgroup ${USER} docker~~

	To start the Docker daemon at boot, see [[OpenRC]].		To start the Docker daemon at boot, see [[OpenRC]].
Line 13:		Line 11:
	rc-update add docker default		rc-update add docker default
	service docker start		service docker start

			Connecting to the Docker daemon through its socket requires you to add yourself to the <code>docker</code> group.

			addgroup ${USER} docker

	=== Docker rootless ===		=== Docker rootless ===

2024-08-28T23:44:50Z

make addgroup command copy and pastable

← Older revision		Revision as of 23:44, 28 August 2024
Line 7:		Line 7:
	Connecting to the Docker daemon through its socket requires you to add yourself to the <code>docker</code> group.		Connecting to the Docker daemon through its socket requires you to add yourself to the <code>docker</code> group.

	addgroup ~~username~~ docker		addgroup ${USER} docker

	To start the Docker daemon at boot, see [[OpenRC]].		To start the Docker daemon at boot, see [[OpenRC]].

2023-12-02T07:53:16Z

How to use docker: reword

← Older revision		Revision as of 07:53, 2 December 2023
Line 102:		Line 102:
	== How to use docker ==		== How to use docker ==

	~~The best documentation on using Docker and creating containers is on~~ the [https://docs.docker.com/ official docker ~~site]~~. ~~Adding anything to it~~ here ~~would~~ be redundant.		Check the [https://docs.docker.com/ official documentation] for details on general usage of docker, including creating and management of containers. Repeating these instructions here be redundant.

	~~You~~ can ~~browse through user images on~~ [https://hub.docker.com/ Docker Hub] ~~and learn from~~ the ~~syntax in contributed dockerfiles~~.		Public images can be browsed at the [https://hub.docker.com/ Docker Hub]. These should also serve as further reference on the Dockerfile format.

	Official Docker image files are denoted on the website by a special badge.		Official Docker image files are denoted on the website by a special badge.