Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Doc Enhancement - Explain what operations require root #2489

Open
DanielYWoo opened this issue Jan 8, 2025 · 1 comment
Open

Doc Enhancement - Explain what operations require root #2489

DanielYWoo opened this issue Jan 8, 2025 · 1 comment
Labels
kind/feature A request for, or a PR adding, new functionality

Comments

@DanielYWoo
Copy link

DanielYWoo commented Jan 8, 2025

Currently the doc says

skopeo does not require the user to be running as root to do most of its operations.

We are very interested in this for security reasons, but we don't fully understand what "most" means, can you improve the doc a little bit to explain what operations are required running with root?

@mtrmac mtrmac added the kind/feature A request for, or a PR adding, new functionality label Jan 8, 2025
@mtrmac
Copy link
Contributor

mtrmac commented Jan 8, 2025

Thanks for reaching out.

I think the short version is “depending on the transport and parameters chosen”, e.g. using docker-daemon: might require access to a root-owned socket, or the machine-wide containers-storage: store is root-owned. I don’t know that we have a comprehensive documentation of the details.

Or, to say it another way, looking at the list of subcommands/operations implemented by Skopeo, nothing in there structurally, always requires privileges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature A request for, or a PR adding, new functionality
Projects
None yet
Development

No branches or pull requests

2 participants