Cockpit not show Container Administrator

Hi list. I have two servers with the same version of cockpit installed (0.114). One appears in the section Container Administrator roles and the other not? it can be? Thank you

[Stef Walter]

On 11.10.2016 17:32, [e-mail] wrote:
> Hi list. I have two servers with the same version of cockpit
> installed (0.114). One appears in the section Container Administrator
> roles and the other not? it can be? Thank you

The 'Container Administrator' role is the 'docker' group. If it doesn't
exist on the system, then those access rights cannot be conferred on a user.

By the way the 'docker' group has dubious security value. It is
essentially a root equivalent group without authentication or logging.
Use at your own risk. The official Docker documentation has warnings
about it.

Relatedly I've put together a pull request which shows the group in
question as a tooltip when hovering over the role:

https://github.com/cockpit-project/cockpit/pull/5173

Stef
> _______________________________________________ cockpit-devel mailing
> list -- [e-mail] To unsubscribe send an
> email to [e-mail]

[Daniel J Walsh]

I wrote a blog a couple of years ago about the docker group.

http://www.projectatomic.org/blog/2015/08/why-we-dont-let-non-root-users-run...

I am not a big fan.

On 10/18/2016 04:39 AM, Stef Walter wrote:
> On 11.10.2016 17:32, [e-mail] wrote:
> > Hi list. I have two servers with the same version of cockpit
> > installed (0.114). One appears in the section Container Administrator
> > roles and the other not? it can be? Thank you
>
> The 'Container Administrator' role is the 'docker' group. If it doesn't
> exist on the system, then those access rights cannot be conferred on a user.
>
> By the way the 'docker' group has dubious security value. It is
> essentially a root equivalent group without authentication or logging.
> Use at your own risk. The official Docker documentation has warnings
> about it.
>
> Relatedly I've put together a pull request which shows the group in
> question as a tooltip when hovering over the role:
>
> https://github.com/cockpit-project/cockpit/pull/5173
>
> Stef
> > _______________________________________________ cockpit-devel mailing
> > list -- [e-mail] To unsubscribe send an
> > email to [e-mail]
>
> cockpit-devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]