[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [atomic-devel] Proposal: no docker group by default



On Fri, Jan 16, 2015 at 10:09:50AM -0500, Colin Walters wrote:
> On Fri, Jan 16, 2015, at 09:41 AM, Stef Walter wrote:
> 
> > It should not be routine to add users to this group. It should be
> > routine to sudo in order to use docker.
> 
> Fully agree.
> 
> > It would be important to make such a decision soon. Ideally this week,
> > since people will come to depend on this group being present by default.
> 
> A major wrinkle here though is upgrades. Fedora 21 (and Atomic variant) have
> already shipped and included a docker package with this group.
> 
> And in order to make it work, we have a docker.socket that references
> the group.

Changes to docker.socket would need to be upstreamed as well.
https://github.com/docker/docker/blob/master/contrib/init/systemd/docker.socket

> 
> My concern here is that if we ship an update that drops the %pre
> and changes docker.socket to be root:root, it will break anyone who
> is using the group now - the group will still be there on upgrades, but
> the socket defaults will change.
> 
> I'd say we could certainly make this change in rawhide - it's reasonable
> to require some admin intervention after major updates.
> 
> Or alternatively, we could just say it was a bad idea and ship a F21
> update that makes this change.
> 

-- 
Lokesh
Freenode, OFTC: lsm5
GPG: 0xC7C3A0DD

Attachment: pgpFgQA3uZW2P.pgp
Description: PGP signature


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]