{"action":"opened","issue":{"url":"https://api.github.com/repos/dgamboaestrada/jefe/issues/2","repository_url":"https://api.github.com/repos/dgamboaestrada/jefe","labels_url":"https://api.github.com/repos/dgamboaestrada/jefe/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/dgamboaestrada/jefe/issues/2/comments","events_url":"https://api.github.com/repos/dgamboaestrada/jefe/issues/2/events","html_url":"https://github.com/dgamboaestrada/jefe/issues/2","id":263590863,"number":2,"title":"Doesn't use sudo for docker/docker-compose calls","user":{"login":"jaromero","id":794031,"avatar_url":"https://avatars1.githubusercontent.com/u/794031?v=4","gravatar_id":"","url":"https://api.github.com/users/jaromero","html_url":"https://github.com/jaromero","followers_url":"https://api.github.com/users/jaromero/followers","following_url":"https://api.github.com/users/jaromero/following{/other_user}","gists_url":"https://api.github.com/users/jaromero/gists{/gist_id}","starred_url":"https://api.github.com/users/jaromero/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jaromero/subscriptions","organizations_url":"https://api.github.com/users/jaromero/orgs","repos_url":"https://api.github.com/users/jaromero/repos","events_url":"https://api.github.com/users/jaromero/events{/privacy}","received_events_url":"https://api.github.com/users/jaromero/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-10-06T22:42:08Z","updated_at":"2017-10-06T22:42:08Z","closed_at":null,"author_association":"NONE","body":"All the invocations of docker and docker-compose are done without checking UID or without delegating to `sudo`. This means that, in order to use this tool as a normal user, one has to [add their own user to the `docker` group](https://wiki.archlinux.org/index.php/Docker#Installation). But doing so is a security risk:\r\n\r\n* ['docker' group is root equivalent and bypasses policy, audit](https://github.com/moby/moby/issues/9976)\r\n* [Docker Security](https://docs.docker.com/engine/security/security/)\r\n\r\nRunning the entire thing under `sudo` is also not an option at the moment, since it creates files that will end up being only writable by root."}}
{"actor":{"display_login":"jaromero"}}