You need to log out of windows then your docker users

Docker run — User group not working as expected?

The group 20 is the dialout group. Now my question: Why does Docker not
understand that my user (1000) and group (1000) is part of the dialout group?
This was working when I used the old docker (apt-get install docker-io,
docker-engine), but after updating to …

crw-rw---- 1 root dialout 188, 0 jul  2 14:34 /dev/ttyUSB0



$ sudo usermod -aG dialout $(whoami)



docker run --user=1000:1000 --rm=true --tty=true --privileged=true --device=/dev/ttyUSB0 --volume=<my_dir>:<my_dir> --workdir=<my_dir> <my_docker_image> <my_script>



can't open device "/dev/ttyUSB0": Permission denied

How to Fix «You must be in the docker-users group» Error in Docker

Desktop

Open Windows + R. Type netplwiz and press Enter. This will list all User IDs
of the computer. Find the appropriate username, and remember what it is. 2.
Add username to the …

You are not allowed to use Docker
You must be in the "docker-users" group



net localgroup docker-users "username" /ADD



net localgroup docker-users "DOMAIN\username" /ADD



You need to log out of Windows
Then your "docker-users"
membership will be taken into
account

Troubleshoot Visual Studio development with Docker

You must be a member of the ‘docker-users’ group in order to have permissions
to work with Docker containers. To add yourself to the group in Windows 10 or
later, follow …

The current user must be in the 'docker-users' group to use Docker Desktop. 
Add yourself to the 'docker-users' group and then log out of Windows.



net localgroup docker-users DOMAIN\username /add



    "graph": "D:\\mypath\\images"

Unable to add myself to the docker group [closed]

I confirmed that the docker group exists $ grep -i docker /etc/group
docker:x:130: but when i tried usermod -aG docker, I got the usage output $
sudo usermod …

$ grep -i docker /etc/group
docker:x:130:



$ sudo usermod -aG docker
Usage: usermod [options] LOGIN

Options:
  -c, --comment COMMENT         new value of the GECOS field
  -d, --home HOME_DIR           new home directory for the user account
  -e, --expiredate EXPIRE_DATE  set account expiration date to EXPIRE_DATE
  -f, --inactive INACTIVE       set password inactive after expiration
                                to INACTIVE
  -g, --gid GROUP               force use GROUP as new primary group
  -G, --groups GROUPS           new list of supplementary GROUPS
  -a, --append                  append the user to the supplemental GROUPS
                                mentioned by the -G option without removing
                                him/her from other groups
  -h, --help                    display this help message and exit
  -l, --login NEW_LOGIN         new value of the login name
  -L, --lock                    lock the user account
  -m, --move-home               move contents of the home directory to the
                                new location (use only with -d)
  -o, --non-unique              allow using duplicate (non-unique) UID
  -p, --password PASSWORD       use encrypted password for the new password
  -R, --root CHROOT_DIR         directory to chroot into
  -s, --shell SHELL             new login shell for the user account
  -u, --uid UID                 new UID for the user account
  -U, --unlock                  unlock the user account
  -v, --add-subuids FIRST-LAST  add range of subordinate uids
  -V, --del-subuids FIRST-LAST  remove range of subordinate uids
  -w, --add-subgids FIRST-LAST  add range of subordinate gids
  -W, --del-subgids FIRST-LAST  remove range of subordinate gids
  -Z, --selinux-user SEUSER     new SELinux user mapping for the user account

excluding group not working #453

Trying to exclude the docker_swarm_configuration group: docker run —rm —net
host —pid host —userns host —cap-add audit_control \\ -e …

docker run --rm --net host --pid host --userns host --cap-add audit_control \
    -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \
    -v /etc:/etc:ro \
    -v /usr/bin/containerd:/usr/bin/containerd:ro \
    -v /usr/bin/runc:/usr/bin/runc:ro \
    -v /usr/lib/systemd:/usr/lib/systemd:ro \
    -v /var/lib:/var/lib:ro \
    -v /var/run/docker.sock:/var/run/docker.sock:ro \
    --label docker_bench_security \
    docker/docker-bench-security -e docker_swarm_configuration,check_1_1


[INFO] 7 - Docker Swarm Configuration
[PASS] 7.1  - Ensure swarm mode is not Enabled, if not needed
[PASS] 7.2  - Ensure the minimum number of manager nodes have been created in a swarm (Swarm mode not enabled)
[PASS] 7.3  - Ensure swarm services are binded to a specific host interface (Swarm mode not enabled)
[PASS] 7.4  - Ensure data exchanged between containers are encrypted on different nodes on the overlay network
[PASS] 7.5  - Ensure Docker's secret management commands are used for managing secrets in a Swarm cluster (Swarm mode not enabled)
[PASS] 7.6  - Ensure swarm manager is run in auto-lock mode (Swarm mode not enabled)
[PASS] 7.7  - Ensure swarm manager auto-lock key is rotated periodically (Swarm mode not enabled)
[PASS] 7.8  - Ensure node certificates are rotated as appropriate (Swarm mode not enabled)
[PASS] 7.9  - Ensure CA certificates are rotated as appropriate (Swarm mode not enabled)
[PASS] 7.10  - Ensure management plane traffic has been separated from data plane traffic (Swarm mode not enabled)



$ sudo bash docker-bench-security.sh -e docker_swarm_configuration,check_6_1,check_5_29
[...]
[PASS] 5.26  - Ensure that container health is checked at runtime (Scored)
[INFO] 5.27  - Ensure that Docker commands always make use of the latest version of their image (Not Scored)
[WARN] 5.28  - Ensure that the PIDs cgroup limit is used (Scored)
[WARN]      * PIDs limit not set: blissful_newton
[WARN]      * PIDs limit not set: eager_lewin
[WARN]      * PIDs limit not set: sharp_wozniak
[PASS] 5.30  - Ensure that the host's user namespaces are not shared (Scored)
[PASS] 5.31  - Ensure that the Docker socket is not mounted inside any containers (Scored)


[INFO] 6 - Docker Security Operations
[INFO] 6.2  - Ensure that container sprawl is avoided (Not Scored)
[INFO]      * There are currently a total of 4 containers, with 3 of them currently running


[INFO] 8 - Docker Enterprise Configuration
[INFO]   * Community Engine license, skipping section 8

[INFO] Checks: 95
[INFO] Score: 12


$ docker run --rm --net host --pid host --userns host --cap-add audit_control \
>     -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \
>     -v /etc:/etc:ro \
>     -v /lib/systemd/system:/lib/systemd/system:ro \
>     -v /usr/bin/containerd:/usr/bin/containerd:ro \
>     -v /usr/bin/runc:/usr/bin/runc:ro \
>     -v /usr/lib/systemd:/usr/lib/systemd:ro \
>     -v /var/lib:/var/lib:ro \
>     -v /var/run/docker.sock:/var/run/docker.sock:ro \
>     --label docker_bench_security \
>     docker/docker-bench-security -e docker_swarm_configuration,check_6_1,check_5_29
[...]
[PASS] 5.26  - Ensure that container health is checked at runtime (Scored)
[INFO] 5.27  - Ensure that Docker commands always make use of the latest version of their image (Not Scored)
[WARN] 5.28  - Ensure that the PIDs cgroup limit is used (Scored)
[WARN]      * PIDs limit not set: blissful_newton
[WARN]      * PIDs limit not set: eager_lewin
[WARN]      * PIDs limit not set: sharp_wozniak
[PASS] 5.30  - Ensure that the host's user namespaces are not shared (Scored)
[PASS] 5.31  - Ensure that the Docker socket is not mounted inside any containers (Scored)


[INFO] 6 - Docker Security Operations
[INFO] 6.2  - Ensure that container sprawl is avoided (Not Scored)
[INFO]      * There are currently a total of 5 containers, with 4 of them currently running


[INFO] 8 - Docker Enterprise Configuration
[INFO]   * Community Engine license, skipping section 8

[INFO] Checks: 95
[INFO] Score: 10

This message shows that your installation appears to be working correctly. So
half of the problem solved, but socket still doesn’t use the correct group, so
I still fail to start …

ls -lah /var/run/docker.sock



[email protected]:~$ groups
leonardo adm cdrom sudo dip plugdev lpadmin sambashare docker
[email protected]:~$ ls -lah /var/run/docker.sock
srwxrwxrwx 1 root docker 0 abr 30 11:31 /var/run/docker.sock
[email protected]:~$ docker info
Client:
 Debug Mode: false

Server:
 ERROR: Cannot connect to the Docker daemon at unix:///run/user/1000/docker.sock. Is the docker daemon running?
 errors pretty printing info

Docker for Windows not working

5. this works for me. 1) start the command line tool first and get the
machine ip address by running. docker-machine ls command. 2) Re-generate certs
docker-machine …

Get http://127.0.0.1:2375/v1.20/version: dial tcp 127.0.0.1:2375: ConnectExtcp: No connection could be made because the target machine actively refused it..
* Are you trying to connect to a TLS-enabled daemon without TLS?
* Is your docker daemon up and running?



Client:
 Version:      1.8.1
 API version:  1.20
 Go version:   go1.4.2
 Git commit:   d12ea79
 Built:        Thu Aug 13 02:49:29 UTC 2015
 OS/Arch:      windows/amd64
Get http://127.0.0.1:2375/v1.20/version: dial tcp 127.0.0.1:2375: ConnectEx tcp: No connection could be made because the target machine actively refused it..
* Are you trying to connect to a TLS-enabled daemon without TLS?
* Is your docker daemon up and running?



"C:\Program Files\Docker Toolbox\docker-machine" ls



"C:\Program Files\Docker Toolbox\docker-machine" env <MACHINE_NAME_HERE> --shell=[cmd|powershell]



"C:\Program Files\Docker Toolbox\docker-machine" env default --shell=cmd
set DOCKER_TLS_VERIFY=1
set DOCKER_HOST=tcp://192.X.X.X:2376
set DOCKER_CERT_PATH=C:\Users\X\.docker\machine\machines\default
set DOCKER_MACHINE_NAME=default
# Run this command to configure your shell:
# copy and paste the above values into your command prompt



/usr/local/bin/generate_cert --overwrite --host=default,127.0.0.1,10.0.2.15,192.168.99.100 --ca=/var/lib/boot2docker/tls/ca.pem --ca-key=/var/lib/boot2docker/tls/cakey.pem --cert=/var/lib/boot2docker/tls/server.pem --key=/var/lib/boot2docker/tls/serverkey.pem



bcdedit /set hypervisorlaunchtype off



docker run hello-world



#You're using a TLS secured daemon : 
set DOCKER_TLS_VERIFY=1

# Precise the Docker Host IP and port, the TLS default is 2376
set DOCKER_HOST=tcp://*<docker_host_IP>*:2376

# The paths to the certificate and client key needed to authenticate to the daemon
# You should have 3 files in this directory : ca.pem, cert.pem and key.pem 
# In my case the default path looks like : 
set DOCKER_CERT_PATH=C:\Users\*<username>*\.docker\machine\machines\default

#the name of your Docker Host VM : 
set DOCKER_MACHINE_NAME=default



Close the virtual machine from Virtual Box (you don't have to delete it)
Close Kitematic
Close Docker Quickstart Terminal



Open Kitematic
Open Docker Quickstart Terminal



NAME      ACTIVE   DRIVER       STATE     URL   SWARM   DOCKER    ERRORS
default   -        virtualbox   Stopped                 Unknown



docker-machine upgrade



docker-machine start default



Client:
 Version:           19.03.1
 API version:       1.40
 Go version:        go1.12.7
 Git commit:        74b1e89e8a
 Built:             Wed Jul 31 15:18:18 2019
 OS/Arch:           windows/amd64
 Experimental:      false

Server: Docker Engine - Community
 Engine:
  Version:          19.03.5
  API version:      1.40 (minimum version 1.12)
  Go version:       go1.12.12
  Git commit:       633a0ea838
  Built:            Wed Nov 13 07:28:45 2019
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          v1.2.10
  GitCommit:        b34a5c8af56e510852c35414db4c1f4fa6172339
 runc:
  Version:          1.0.0-rc8+dev
  GitCommit:        3e425f80a8c931f88e6d94a8c831b9d5aa481657
 docker-init:
  Version:          0.18.0
  GitCommit:        fec3683



docker-machine env default

Why group name «docker» is not created on installation of docker on mac?

2. Docker for Mac is just special like that. You can solve it few ways: From
least recommended to most recommended order: Modify the permission of
/var/run/docker.sock so …

  brew cask install docker



$ ls -l /var/run/docker.sock
lrwxr-xr-x  1 root  daemon  70 12 Jan 08:19 /var/run/docker.sock -> /Users/user1/Library/Containers/com.docker.docker/Data/docker.sock



 $ cat /etc/group | grep docker
 $ uname -a
Darwin user1 18.7.0 Darwin Kernel Version 18.7.0: Sun Dec  1 18:59:03 PST 2019; root:xnu-4903.278.19~1/RELEASE_X86_64 x86_64

 $
 $ cat /etc/group | grep daemon
 daemon:*:1:root

Docker for Windows — Access Denied #868

Open Docker for Windows. Logon to Windows as Administrator. Go to Windows
Administrator Tools. Look for Windows Computer Management and click on it. Or
you can skip …

Access to the path 'C:\Program Files\Docker\Docker\Bugsnag.dll' is denied.
   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize)
   at LightweightInstaller.UnpackArtifactsStep.<DoAsync>d__23.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at LightweightInstaller.InstallWorkflow.<HandleD4WPackage>d__19.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at LightweightInstaller.InstallWorkflow.<ProcessAsync>d__18.MoveNext()



net localgroup "docker-users" "<your username>" /add



net localgroup "docker-users" "<your username>" /add