none
Can Docker daemon be run as non-interactive service? RRS feed

  • Question

  • Hello

    I asked Mr Corioland and he referred me to this forum.

    On Windows, can the Docker daemon be run as a non-interactive service?

    Thanks


    Daniel

    Wednesday, July 20, 2016 2:44 PM

Answers

  • Hi, Daniel,

    What are you talking about? The dockerd.exe is meant to be run as a background service by nature:

    https://msdn.microsoft.com/virtualization/windowscontainers/quick_start/quick_start_windows_server?f=255&MSPPError=-2147217396

    To install Docker as a Windows service, run the following.

    dockerd --register-service
    

    Once installed, the service can be started.

    Start-Service docker

    Wednesday, July 20, 2016 5:07 PM

All replies

  • Hi, Daniel,

    What are you talking about? The dockerd.exe is meant to be run as a background service by nature:

    https://msdn.microsoft.com/virtualization/windowscontainers/quick_start/quick_start_windows_server?f=255&MSPPError=-2147217396

    To install Docker as a Windows service, run the following.

    dockerd --register-service
    

    Once installed, the service can be started.

    Start-Service docker

    Wednesday, July 20, 2016 5:07 PM
  • Hi Yen

    Thanks for your answer, and apologies for being unclear: The idea of running as non-interactive service ID

    (see example here http://superuser.com/questions/872669/can-windows-scheduler-jobs-run-under-a-non-interactive-service-account )

    is to help prevent potential attackers from using the id to log in somewhere even if they capture the Docker service ID.

    Hence my question: Can you run it as non-interactive?

    Thanks

    Daniel


    Thursday, July 21, 2016 4:40 PM
  • The dockerd.exe daemon runs as "SYSTEM".  By definition this is a non-interactive account.  I would imagine that you could run it as another user without interactive privileges.  I am not sure what rights that user would need, but it would be a bunch on the local machine.

    Regards

    Frank


    Frank Postle

    Friday, July 22, 2016 1:04 AM