I want to use docker-machine to deploy containers on a Debian 9 server from my local computer.
I followed instructions from this page, which clearly indicates:
If you are using « sudo » on the host, make sure you configure passwordless sudo:
# visudo %sudo ALL=(ALL) NOPASSWD:ALL
In addition, docker documentation for
generic docker-machine driver mention the same:
The user that is used to SSH into the host can be specified with
--generic-ssh-userflag. This user needs password-less sudo privileges. If it’s not the case, you need to edit the
sudoersfile and configure the user as a sudoer with
I'm not an expert, but I feel something is wrong here... Doesn't allowing a user on a production server to execute any command without password open a security breach? Or am I missing something?