News for hackers. Stuff that matters.

A comment on Real-world stories of how we’ve compromised CI/CD pipelines. Parent comment

Re:Real-world stories of how we’ve compromised CI/CD pipelines by lima on Monday January 17, 2022 @04:41PM (#29971995)
> We specifically need to run privileged containers so that we could run docker-in-docker for CI workloads, so rootless docker or podman wouldn't have helped.

rootless docker works inside an unprivileged container (that's how our CI works).

[ Parent | on HN ]
Re:Real-world stories of how we’ve compromised CI/CD pipelines by HenAm on Wednesday January 19, 2022 @07:09PM (#30002367)
How do you run rootless docker in unprivileged container ? Here it says that the privilege is still a must.

https://docs.docker.com/engine/security/rootless/#rootless-d...

[ Parent | on HN ]