From owner-freebsd-virtualization@freebsd.org Wed Nov 28 17:33:34 2018 Return-Path: Delivered-To: freebsd-virtualization@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A235F1137454 for ; Wed, 28 Nov 2018 17:33:34 +0000 (UTC) (envelope-from kappei84@gmail.com) Received: from mail-wm1-x32c.google.com (mail-wm1-x32c.google.com [IPv6:2a00:1450:4864:20::32c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E17287E446 for ; Wed, 28 Nov 2018 17:33:33 +0000 (UTC) (envelope-from kappei84@gmail.com) Received: by mail-wm1-x32c.google.com with SMTP id q26so3399410wmf.5 for ; Wed, 28 Nov 2018 09:33:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=fF5P1ZUe2RvUjw2qXtcBItZNs/aAMKVk8I/k2gF7L9Y=; b=q615NxwsuMBjdvXO67dHakGE+70fhn8rwYAPr9qWpVJGwaNmt+ww7HtjFoazcQub72 v7y0waVF2HfgKU2h5tzkHR584Cj0sPWXAXx1/U7cHzKRBwZ0oduiDWO6lxYb3qOV01wP xzgrlZKHyrQcjEr7NLmkoA1okJFEOE1B16YKLGp7ACv0BYmBPPdWQNrZX9bIAHwpU07b RflYIWtJYDoGl2WQvTD40FaJYFGjBq/ya4+MZKAGmiT0DMZmJ6mPUsaZPJRpVb9Hztta UVaevrOw7EHNr86ghW8osQr7XAd4p6QC1AijJ1vZ6WxVFLuWPcxcX6Hp/d4/N/GMpC3e 18ig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=fF5P1ZUe2RvUjw2qXtcBItZNs/aAMKVk8I/k2gF7L9Y=; b=rAtGgEp7k4Fhn3P89YkJ19cUE10nkMd53BE7ZWSVcjc2GXZLwoRvNXqnKu4WMCBP+V QfRKkN7Udd/q4pRMyH4/LkoYhJU0FUMSYMvuUO6TmZrF5o2R8vZb8V4XsKWGG1J/QC8j 6MQ89Lre9S/woUkzYop0HFVP5zDIOXqezZhjsvafeYmPf9M2SEsLDvyYtJSGP3tjCzoZ GEiIAKyhgLDHdVFysgBcQQKcOwbcks8o+cpU5PtMV6AUgRU4oeYTsi69olBi9/TReHuG G9c1dYtbE9KgXjZKmDgCXQIyKCuWWpuXuVrLQlIBs2x58+7HGb9yyMuY59Fdi0tBJ4+7 52xQ== X-Gm-Message-State: AA+aEWaFwga8CRIvJEZCw/mWXDSAfqJOd0A99OBjoeHtDwUlcFkstocH mPSFh3AV9pD4Dq/pwkbZ5e9fJydIfWKi8M6HAYjRODA= X-Google-Smtp-Source: AFSGD/Xo0WnEsgeGFyPjYT1jVtttAJlr6xlF7LiH5Yc7qMgkrcJBreHElAbumjgriTV3ytTCcTxUHG61fGi7csWnzV0= X-Received: by 2002:a1c:ddc3:: with SMTP id u186mr3490159wmg.110.1543426411876; Wed, 28 Nov 2018 09:33:31 -0800 (PST) MIME-Version: 1.0 From: Daniele Mazzotti Date: Wed, 28 Nov 2018 18:33:20 +0100 Message-ID: Subject: Docker as Normal User To: freebsd-virtualization@freebsd.org X-Rspamd-Queue-Id: E17287E446 X-Spamd-Result: default: False [-4.56 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-virtualization@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; IP_SCORE(-0.58)[ipnet: 2a00:1450::/32(-1.47), asn: 15169(-1.35), country: US(-0.09)]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[c.2.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.97)[-0.969,0]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2] X-Rspamd-Server: mx1.freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-virtualization@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussion of various virtualization techniques FreeBSD supports." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2018 17:33:34 -0000 Hello there, I was skimming trough the documentation at the following address ( https://wiki.freebsd.org/Docker) while installing docker on my Freebsd 11.2-RELEASE box last night, and I spotted something which did not work in my case. In order to run Docker as a "non-root/non-super user" one is supposed to issue the command below: pw usermod -G operator,... Unfortunately that does not work, because in that case, when I issue whatever docker command (e.g. docker ps) I get the following error: Get http://%2Fvar%2Frun%2Fdocker.sock/v1.19/images/search?term=centos: dial unix /var/run/docker.sock: connect: no such file or directory. Are you trying to connect to a TLS-enabled daemon without TLS? What has fixed my problem was to assign the user to the wheel group instead. Is it possible that the documentation is outdated? In my opinion being part of the wheel a group is a tad too much. Best regards, Daniele.