`docker` implies access to the Docker daemon, which is not an improvement over t... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

willglynn on May 20, 2020 | parent | context | favorite | on: Why Is This Website Port Scanning Me?

`docker` implies access to the Docker daemon, which is not an improvement over the setuid binaries anderspitman found distasteful.

https://docs.docker.com/engine/security/security/#docker-dae...

lxdquestion on May 20, 2020 | [–]

Genuine question, would LXD be any better? I'm not an expert in containerization but I find it really interesting.

There are some blogs that talk about how to do this: https://blog.simos.info/how-to-easily-run-graphics-accelerat...

sadfklsjlkjwt on May 21, 2020 | | [–]

If it runs in the same Xwindows session no.

folmar on May 20, 2020 | [–]

If your docker is in fact podman your rootless might be attainable.

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact