我在装有Ubuntu操作系统的机器上安装了Docker。 当我跑步时:
sudo docker run hello-world
一切都很好，但是我想隐藏sudo命令以使该命令更短。 如果我写的命令没有sudo
docker run hello-world
显示如下:
docker: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post http://%2Fvar%2Frun%2Fdocker.sock/v1.35/containers/create: dial unix /var/run/docker.sock: connect: permission denied. See 'docker run --help'.
当我试图跑步时，同样的情况也会发生:
docker-compose up
我该如何解决这个问题?
当前回答
只要打开终端，输入这个命令
sudo chmod 666 /var/run/docker.sock
其他回答
我们总是忘记acl。看到setfacl。
sudo setfacl -m user:$ user: rw /var/run/docker.sock
在Linux环境下，安装docker后，需要重新启动docker才能更好地避免这个问题。
$ sudo systemctl restart docker
在Centos上安装Docker后。在运行下面的命令时，我得到下面的错误。
[centos@aiops-dev-cassandra3 ~]$ docker run hello-world
docker: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post http://%2Fvar%2Frun%2Fdocker.soc k/v1.40/containers/create: dial unix /var/run/docker.sock: connect: permission denied.
See 'docker run --help'.
修改docker.socket的Group和Permission
[centos@aiops-dev-cassandra3 ~]$ ls -l /lib/systemd/system/docker.socket
-rw-r--r--. 1 root root 197 Nov 13 07:25 /lib/systemd/system/docker.socket
[centos@aiops-dev-cassandra3 ~]$ sudo chgrp docker /lib/systemd/system/docker.socket
[centos@aiops-dev-cassandra3 ~]$ sudo chmod 666 /var/run/docker.sock
[centos@aiops-dev-cassandra3 ~]$ ls -lrth /var/run/docker.sock
srw-rw-rw-. 1 root docker 0 Nov 20 11:59 /var/run/docker.sock
[centos@aiops-dev-cassandra3 ~]$
使用以下docker命令进行验证
[centos@aiops-dev-cassandra3 ~]$ docker run hello-world
Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
1b930d010525: Pull complete
Digest: sha256:c3b4ada4687bbaa170745b3e4dd8ac3f194ca95b2d0518b417fb47e5879d9b5f
Status: Downloaded newer image for hello-world:latest
Hello from Docker!
This message shows that your installation appears to be working correctly.
To generate this message, Docker took the following steps:
1. The Docker client contacted the Docker daemon.
2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
(amd64)
3. The Docker daemon created a new container from that image which runs the
executable that produces the output you are currently reading.
4. The Docker daemon streamed that output to the Docker client, which sent it
to your terminal.
To try something more ambitious, you can run an Ubuntu container with:
$ docker run -it ubuntu bash
Share images, automate workflows, and more with a free Docker ID:
https://hub.docker.com/
For more examples and ideas, visit:
https://docs.docker.com/get-started/
[centos@aiops-dev-cassandra3 ~]$
为了解决这个问题，我搜索了我的docker和docker-compose安装在哪里。在我的例子中，docker安装在/usr/bin/docker, docker-compose安装在/usr/local/bin/docker-compose路径下。然后，我在我的终端中这样写:
码头工人:
sudo chmod +x /usr/bin/docker
docker-compose:
sudo chmod +x /usr/local/bin/docker-compose
现在我不需要在我的命令docker中写入单词sudo
/***********************************************************************/
勘误:
这个问题的最佳解决方案由@mkasberg评论。我引用评论:
这可能会起作用，你可能会遇到问题。此外，这也是一个安全漏洞。你最好把自己加入docker组，就像文档中说的那样。sudo groupadd docker, sudo usermod -aG docker $USER。 文档:https://docs.docker.com/install/linux/linux-postinstall/
你可以按照以下步骤来做，这会对你有用:
create a docker group sudo groupadd docker add your user to this group sudo usermod -aG docker $USER list the groups to make sure that docker group created successfully by running this command groups run the following command also to change the session for docker group newgrp docker change the group ownership for file docker.socksudo chown root:docker /var/run/docker.sock change the ownership for .docker directory sudo chown "$USER":"$USER" /home/"$USER"/.docker -R finally sudo chmod g+rwx "$HOME/.docker" -R
在这个测试之后，你可以运行docker ps -a
