Skip to content

Rootful Docker

Prefer rootless Docker. Adding a user to the docker group is guest-root equivalent: that user can become root and read every project in the VM. Use a throwaway VM for Docker-heavy or untrusted work.

Terminal window
sudo dnf5 install -y moby-engine docker-compose || \
sudo dnf5 install -y docker docker-compose-plugin
sudo systemctl enable --now docker
sudo usermod -aG docker "$DVM_USER"

Built and maintained by eshlox.