News for hackers. Stuff that matters.
Re:Unprivileged Docker Builds – A Proof of Concept by jcims on Sunday April 29, 2018 @05:54PM (#16954121)
Fair enough, but there are cases where allowing that while also meeting the web of regulatory requirements that beset some industries is difficult if not practically impossible.
Re:Unprivileged Docker Builds – A Proof of Concept by user5994461 on Sunday April 29, 2018 @05:58PM (#16954137)
In layman terms, expect banks, defense, government and healthcare to have a dedicated operation team with root access. Developers do not have it.
Re:Unprivileged Docker Builds – A Proof of Concept by crypt1d on Sunday April 29, 2018 @06:02PM (#16954156)
I've seen that in a couple of IT outsourcing companies, too. Its hilarious because it complicates working with these companies so much that sometimes u just might reconsider hiring the company and do the work yourself. I dont think they realize how much they are shooting themselves in the foot with dumb restrictions like that.
Re:Unprivileged Docker Builds – A Proof of Concept by vbezhenar on Sunday April 29, 2018 @06:02PM (#16954151)
Can you run VirtualBox and use it as your working machine instead?
Re:Unprivileged Docker Builds – A Proof of Concept by phs318u on Sunday April 29, 2018 @06:34PM (#16954287)
If the VM is on the corporate network then it’s the same as connecting an unmanaged device - defeats the purpose of locking down machines. Developer VMs should be on their own VLAN.
Re:Unprivileged Docker Builds – A Proof of Concept by user5994461 on Sunday April 29, 2018 @06:13PM (#16954203)
Yes, but I think you are missing the point. Developers can access dev and production machines with non root users, root is never needed to run software.

If you are part of the sysadmins that really need root, to manage iptables or system updates for instance, you would have root.