Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Great article, a couple of comments:

  root@dinospace: wget -qO- \
  https://raw.github.com/progrium/dokku/master/bootstrap.sh \
  | sudo bash
First, if you're already logged in as root, there is no[1] need for sudo. Secondly, I know this is how dokku recommends installing, but a) running wget as root probably isn't the best idea, and b) pulling down a shell script and running it as root is a really bad idea. At least download the script and check that you're running what you think you're doing (in fact, you'll see that the script is just a short list of things, few of which needs to be run as root).

  ana@local: cat ~/.ssh/id_rsa.pub | \
  ssh root@dinosaurspaceships.org \
  “sudo gitreceive upload-key username”
Same thing - either give your regular user sudo privileges (and prepare to have to enter your password, unless you specify to not need one -- in which case that should be limited to eg the gitrecieve command) -- or just drop the sudo.

I think docker is a great project, but I would like to see more support for running it under different user(s) than root. Looks like I'm not the only one:

  https://github.com/dotcloud/docker/issues/1121
[1] sudo does some logging, but that is mainly helpful when it can log a "useful" user name, not "root" -- ie: you can see who broke the server, if more than one person has sudo access.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: