How to Allow Non-Admin Active Directory Users Access to Docker Without Sudoers

active-directorydockergroupspermissionsroot

I have a compute server with users that authenticate over AD.

I want these users to be able to use Docker without making them sudoers.

The official advice is to add users to the docker group, as "[w]hen the docker daemon starts, it makes the ownership of the Unix socket read/writable by the docker group." So users belonging to the group docker won't need to run commands with sudo.

I can't add an AD user to a local group though.

How can I let them use Docker CE as non-root without creating local accounts?

Best Answer

add your user to docker group explicitly in /etc/group and specify the group in /etc/docker/daemon.json

/etc/group

docker:x:groupID:user

/etc/docker/daemon.json

{
  "live-restore": true,
  "group": "docker"
}

restart docker daemon

Related Topic