Minikube now supports rootless podman driver for running Kubernetes

Re:Minikube now supports rootless podman driver for running ... by awoimbee on Thursday June 23, 2022 @05:24AM (#31846724)

On servers, yes, rootless doesn't make much sense. But on on my dev laptop, "sudo docker" is tiring and adding docker to the sudoers group is a big security hole (why does everyone seem to think that "docker run" giving root privileges is ok ?!).

[ Parent | on HN ]

Re:Minikube now supports rootless podman driver for running ... by snorremd on Thursday June 23, 2022 @07:53AM (#31847770)

This indeed. The Docker team should not include the "adding your user to the docker group"-section in the install documentation. It is very unsafe and even though they link to a document on security implications I don't think all users will truly grasp the implications.

Better to hide this feature and promote the rootless docker mode for local use. On servers you won't be adding any unprivileged user to the docker group in any case.

[ Parent | on HN ]

Re:Minikube now supports rootless podman driver for running ... by candiddevmike on Thursday June 23, 2022 @06:18AM (#31847089)

You should add yourself to the docker group...

[ Parent | on HN ]

Re:Minikube now supports rootless podman driver for running ... by rcxdude on Thursday June 23, 2022 @06:45AM (#31847265)

which has the same effect, the docker group effectively has root access.

[ Parent | on HN ]

Re:Minikube now supports rootless podman driver for running ... by Bayart on Thursday June 23, 2022 @06:30AM (#31847178)

sudo usermod -aG docker $USER

[ Parent | on HN ]

Re:Minikube now supports rootless podman driver for running ... by prmoustache on Thursday June 23, 2022 @07:53AM (#31847767)

this is not safer.

[ Parent | on HN ]

Re:Minikube now supports rootless podman driver for running ... by moody5bundle on Thursday June 23, 2022 @09:07AM (#31848521)

this is the same as:

%wheel ALL=(ALL) NOPASSWD: ALL

effectively disabling sudo completely.

[ Parent | on HN ]