Not so simple bind mounting docker.sock means you give access to anything on host, so you just give up with security and isolation between builds. Docker in Docker require some adequate combination for the docker daemon setup to be nested, especially on how it stores containers layers on disk (and then, nested layers for second level docker daemon). play-with-docker uses device mapper + overlay2 with success.
2017-07-10 17:36 GMT+02:00 Yakobe <[email protected]>: > Then it sounds like this i achievable. Thanks so much for the response. At > least i know that this is something worth looking in to. > > I read somewhere about this Docker in Docker approach (i think it is > sometimes referred to as DinD?). Some people where saying it is not a good > idea. > Am i right in understanding that it is better to bind mount > /var/run/docker.sock? > > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/jenkinsci-users/a65338f8-a2da-4a3a-93dd-224d8b3fb74b%40googlegroups. > com > <https://groups.google.com/d/msgid/jenkinsci-users/a65338f8-a2da-4a3a-93dd-224d8b3fb74b%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CANMVJzmcX%3D-ZGixBJprfXUSqWWXeTr9WcWZnJp-%3D2%2BC%3DJE9doQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
