tl;dr: dockman changing permissions of /docker an I don’t like it. Is it normal? Am I a control freak?
I’ve been using Linux for years, but always at a user level. Since last year I started tinkering, since I wanted to get out of big tech dependency. Now I’m running a modest home server and it’s been great so far.
The problem I’m facing right now is that the number or docker containers grew up to a point where I thought of using a manager of sorts. Dockman feels good enough for me but it keeps changing permissions of the docker folder to root:root, so I keep getting pushed out.
I guess makes sense that, if I manage everything from Dockman, it would take control, but I really don’t like that I can’t manage permissions of folders on my server or PC and delegating that to a mere docker manager.
Thoughts on this?
Can you clarify the WHAT here? What is in /docker, your volume mounts, or your layers and internals?
Also, how are you running it? Local process, or in a container itself?
In /docker I have just the yml and .env files. All the data is on an external volume, docker runs as a local process and Dockman is a container (not sure if this is what you asked, sorry).
I tried dockge yesterday and I think it does not change permissions, haven’t had time to really check. I just want to select and x number or containers and click update lol until now I had to get into every folder and docker compose pull.
Try out podman, it runs rootless containers with no problem.
No problem is a bit of an exaggeration, though. For starters, if your are running with a non-root user, it bites you when trying to share a host volume, specially in SELinux. I can imagine other situations when one has to fiddle with it. But yes, go with podman whenever possible.
I just found out something else: restic can’t access the folders because root:root. this is so annoying! I’ll try podman again… I didn’t see how to make it find my containers lol
podman unshare is your friend. And placing :Z at the end of
blvolume share to make SELinux happyYou will have to transfer your containers before you can see them.




