Conversation
|
Appreciate this is slightly more secure, but might be a breaking change. Can we retain backwards-compatibility? e.g. test for the existence of the Docker group and use it if configured, automated tests probably won't have Alternatively rely on user's aliases? |
|
The original motivation for this PR was to prevent breakage for users that don't have the docker group configured. Currently, they have to go through and manually make the above changes to get things working, or re-add their user to the docker group. Adding the group check and falling back to sudo would be probably the better user experience. Although, we'd have to implement the check in multiple places (Makefile and validate-reqs script), but not the worst thing in the world. I'm intrigued by your automated testing use-case. Is there a use-case where the user that runs |
As it's a change to the status-quo, we can assume it's a breaking change for users in the current configuration. My mindset is to never break things where possible.
I'd assume anything/body currently consuming this either has an alias in place for |
What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)
feat: Don't require the use of docker group, all local invocations of docker are prepended with sudo.
What is the current behavior? (You can also link to an open issue here)
Current scripts assume the use of docker group, which may not be configured for all users
What is the new behavior (if this is a feature change)?
Default to using docker through
sudocommand, which should work for all users. Docker group users can revert to using just sudo-lessdockermore easily in the Makefile.