News for hackers. Stuff that matters.

A comment on Minikube now supports rootless podman driver for running Kubernetes. Parent comment

Re:Minikube now supports rootless podman driver for running ... by coffeekid on Thursday June 23, 2022 @05:39AM (#31846826)
You can also call docker commands by being part of the docker group IIRC.

Doesn't this have more to do with the daemon that the user executing commands ?

[ Parent | on HN ]
Re:Minikube now supports rootless podman driver for running ... by q3k on Thursday June 23, 2022 @05:50AM (#31846906)
> You can also call docker commands by being part of the docker group IIRC.

Which effectively gives you root on the host.

[ Parent | on HN ]
Re:Minikube now supports rootless podman driver for running ... by prmoustache on Thursday June 23, 2022 @07:51AM (#31847757)
Which is an horrible practice and has roughly the same attack surface as login as root all the time.
[ Parent | on HN ]
Re:Minikube now supports rootless podman driver for running ... by rythie on Thursday June 23, 2022 @09:26AM (#31848776)
With podman there is no daemon, everything is running as you. The standard setup for docker has a daemon running as root, which means when you start a container it has root privileges.
[ Parent | on HN ]