To my knowledge, people usually open docker group for regular users, so they could have a separate environment to do almost anything without root permission of host.
But if docker command needs to be run by sudo
, like sudo docker exec -it CONTAINER /bin/bash
, is it a good way to hide information, for instance, source code in container?
My question is, to be more specific, if sudo
is necessary to run docker
, is it possible to see what's inside container, or even access it, without root permission?