[question] run nerdctl as root but without sudo

[shyim]

Hey,

is it possible to use nerdctl on normal account but with root mode? Like in docker adding the current user to the docker group 🤔

[tigerinus]

same question here - any anwser yet?

[AkihiroSuda]

is it possible to use nerdctl on normal account but with root mode? Like in docker adding the current user to the docker group

No, due to #473 (comment) .

Workaround is alias nerdctl=sudo nerdctl, or set SETUID on nerdctl binary.
(In the latter case, the nerdctl binary should be placed in ~/bin, and chmod 700 ~/bin)

[AkihiroSuda]

Added a documentation about this in https://github.com/containerd/nerdctl/blob/master/docs/faq.md#does-nerdctl-have-an-equivalent-of-sudo-usermod--ag-docker-user-

mkdir -p $HOME/bin
chmod 700 $HOME/bin
cp /usr/local/bin/nerdctl $HOME/bin
sudo chown root $HOME/bin/nerdctl
sudo chmod +s $HOME/bin/nerdctl
export PATH=$HOME/bin:$PATH

[arnoldas500]

Is there a solution to this yet? Having to do the above for every k8s user on the system doesnt seem like a good option if you have many users.

[AkihiroSuda]

You can place the setuid-enabled nerdctl binary into a directory that is accessed by a specific GID (chmod 750), but you shouldn't give the root to that "many users"?

[arnoldas500]

Thanks for sharing that.

Is there possibly a better tool than nerdctl to allow users to commit running containers managed by k8s? I switch from docker to containerd and nerdctl but it also doesnt seem like a good option.