Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
Filligree
on Feb 12, 2016
|
parent
|
context
|
favorite
| on:
Subuser turns Docker containers into normal Linux ...
The user using this has to be in that group, the programs being run do not.
For a single-user machine, it may be okay. But I don't trust Docker's security very much.
raesene4
on Feb 12, 2016
[–]
any particular reasons you don't trust Docker security?
cyphar
on Feb 13, 2016
|
parent
[–]
The daemon has had many security issues. They also only recently grew support for ACLs (which are only available as plugins), so any user that can write to the Docker socket is essentially equivalent to root.
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
For a single-user machine, it may be okay. But I don't trust Docker's security very much.