dockerip

[arjanvandervelde]

Hello Danielle! We've been running this for quite some time now with a small modification that makes it possible to use the nsswitch without having to be a member of the docker group. It works by compiling a simple executable that is installed with setgid permissions and calls docker inspect (by absolute path). Sorry for messing with the formatting.

-- Arjan

[danni]

Why does someone not in the docker group need to access a docker host?

[arjanvandervelde]

we have users ssh into dockers. they'd do something like ssh user@container.docker. we do not want these users in the docker group per se because that practically gives them the entire host.