Print

Print


Sorry... it doesn't. Users can build docker images using the gitlab CI and for some reason I thought they could use them on lxplus.
 

On 24/09/2018 15:11, Alessandra Forti wrote:
[log in to unmask]"> PS CERN has docker on lxplus.

On 24/09/2018 15:07, Alessandra Forti wrote:
[log in to unmask]"> Hi,

don't higher privileges depend on what the user does in the image? If he does normal application things he doesn't really need higher privileges. i.e. in normal mode they cannot start services but can run their applications and mount directories.

cheers
alessandra
 
On 24/09/2018 14:36, Kashif Mohammad wrote:
[log in to unmask]">

 

Hi

 

One of our local user wants to run docker on shared interactive server. Docker can be run by normal user but user has to be added to dockerroot group which has higher privilege. I am tempted to refuse this request as interactive machine has many mounted file system etc.

 

But before refusing I thought that I should take second opinion. Is anyone allowing users to run docker on shared machines or is there way to run docker in more secure manner?

 

Cheers

 

Kashif

 



To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1


-- 
Respect is a rational process. \\//
For Ur-Fascism, disagreement is treason. (U. Eco)


To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1


-- 
Respect is a rational process. \\//
For Ur-Fascism, disagreement is treason. (U. Eco)


To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1


-- 
Respect is a rational process. \\//
For Ur-Fascism, disagreement is treason. (U. Eco)


To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1