Skip to content

added rootless mode #255

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 2 commits into from
Closed

added rootless mode #255

wants to merge 2 commits into from

Conversation

sluetze
Copy link

@sluetze sluetze commented Feb 2, 2021

Hi,

i wrote a small tasklist to introduce rootless mode.
There are some caveats. I only tested ubuntu >20 and also depends on the rpms /debs and is not installed 'directly' via download.
I also don't know if docker-ee packets are named identically

I was not able to enable the daemon in user mode with systemd and created the links and files manually. I'm happy to get some input on how to do it better.

Best Regards
-- sluetze

@stale
Copy link

stale bot commented May 5, 2021

This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark pull requests as stale.

@stale stale bot added the stale label May 5, 2021
@stale
Copy link

stale bot commented May 31, 2021

This pull request is no longer marked for closure.

@stale stale bot removed the stale label May 31, 2021
@geerlingguy
Copy link
Owner

This seems like a nice addition.

@espro
Copy link

espro commented Jul 2, 2021

This is not ready to be merged, contains personal info, is not compatible with RHEL, etc.

@sluetze
Copy link
Author

sluetze commented Jul 3, 2021

@espro thanks, found that personal info part, can you tell me what is incompatible with RHEL?

@espro
Copy link

espro commented Jul 4, 2021

  • newuidmap and newgidmap are not provided by uidmap package on RHEL, they are in shadow-utils and only available starting with RHEL 7.7
  • https://docs.docker.com/engine/security/rootless/ suggests there are other package requirements, and if using RHEL 8 with SELinux enabled changes to the policy may be required (and the recommendation in the Docker docs is lazy)

There could be other issues, so proper testing is required and since this role is aimed at Debian and Redhat, I think ensuring compatibility is a requirement

@sluetze sluetze closed this Feb 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants