I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, which I started, since they may contain sensitive data.

Is there a way to create a secure configuration which doesn't require creating virtual machine?

Hi and welcome to DevOps SE!

To enable Role-Based Access Control (RBAC) for Docker Engine, you need the UCP (Universal Control Pane) available through Docker EE.

https://success.docker.com/article/rbac-example-overview

A free alternative could be also the Kubernetes module rbac.authorization.k8s.io.

Side note: To control docker commands available to a user, use AuthZPlugin for the Docker engine (there are open source implementations of this API).

  • I've read the documentation, but I am still not sure, how this can be done. Would you be able to add some example to your answer? – noisy Sep 13 at 8:03
  • it looks like, with both solutions I can only restrict a users access to particular commands. But what I need, is to give full access to some container and none access to others – noisy Sep 13 at 8:11
  • yeah...at first glance, this is what I need. But pricing of docker EE...is not acceptable for me :( – noisy Sep 13 at 8:22

Your Answer

 

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.