Skip to content

Conversation

AkihiroSuda
Copy link
Contributor

@AkihiroSuda AkihiroSuda commented Aug 25, 2025

https://docs.docker.com/engine/security/rootless/ was too lengthy and giving a false sense that Rootless mode was quite clunky and hard to use, although actually it can be just set up in a single command:

dockerd-rootless-setuptool.sh install

Description

Commit 1: engine/security/rootless: split to multiple pages

This commit only splits the page.
The content will be updated in subsequent commits.

Commit 2: engine/security/rootless: remove outdated/duplicated info

Setup:

  • dockerd-rootless-setuptool.sh has been improved to show help when the prerequisites are not satisfied.
    Users no longer need to read the lengthy "prerequisites" documentation unless they encounter issues.

  • The document had duplicated descriptions about dbus, uidmap, and machinectl stuffs in several places.

Graph drivers:

  • Rootless OverlayFS has been merged into the upstream since kernel 5.11:
    torvalds/linux@459c7c5 .
    Ubuntu no longer patches the kernel.

  • FUSE-OverlayFS is typically no longer needed on the current supported distros,
    except EL 8.

SELinux:

  • Remove a workaround for an issue that was already fixed in Docker Engine v20.10.8.

CLI:

Related issues or tickets

Reviews

  • Technical review
  • Editorial review
  • Product review

Preview

https://deploy-preview-23302--docsdocker.netlify.app/engine/security/rootless/

@github-actions github-actions bot added area/engine Issue affects Docker engine/daemon area/security labels Aug 25, 2025
@AkihiroSuda
Copy link
Contributor Author

cc @thaJeztah

Copy link

netlify bot commented Aug 25, 2025

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 061ed75
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/68ac0ff6e7b08e00087107bc
😎 Deploy Preview https://deploy-preview-23302--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

This commit only splits the page.
The content will be updated in subsequent commits.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
@AkihiroSuda AkihiroSuda force-pushed the rootless branch 2 times, most recently from 4116d2d to 75284be Compare August 25, 2025 07:01
Setup:
- `dockerd-rootless-setuptool.sh` has been improved to show help when the prerequisites are not satisfied.
  Users no longer need to read the **lengthy** "prerequisites" documentation unless they encounter issues.

- The document had duplicated descriptions about dbus, uidmap, and machinectl stuffs in several places.

Graph drivers:
- Rootless OverlayFS has been merged into the upstream since kernel 5.11:
  torvalds/linux@459c7c5 .
  Ubuntu no longer patches the kernel.

- FUSE-OverlayFS is typically no longer needed on the current supported distros,
  except EL 8.

SELinux:
- Remove a workaround for an issue that was already fixed in Docker Engine v20.10.8.

CLI:
- `docker context use rootless` no longer needs to be executed manually,
  since Docker v23. (moby/moby PR 43061)

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
```
Warning: [vale] reported by reviewdog 🐶
[Docker.Avoid] Consider removing 'very'.

Raw Output:
{"message": "[Docker.Avoid] Consider removing 'very'.", "location": {"path": "content/manuals/engine/security/rootless/_index.md", "range": {"start": {"line": 18, "column": 9}}}, "severity": "WARNING"}
reviewdog: found at least one issue with severity greater than or equal to the given level: warning
Error: [vale] reported by reviewdog 🐶
[Vale.Terms] Use 'cgroup' instead of 'Cgroup'.

Raw Output:
{"message": "[Vale.Terms] Use 'cgroup' instead of 'Cgroup'.", "location": {"path": "content/manuals/engine/security/rootless/troubleshoot.md", "range": {"start": {"line": 73, "column": 3}}}, "severity": "ERROR"}
```

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/engine Issue affects Docker engine/daemon area/security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant