Aikido security report - Docker user root

aikdo (aikido.dev) is complaining that the Docker user is not set. I don’t see a security risk in this because Fly.io will ensure that Docker is not running as root (or doesn’t it?). Is my assessment correct? What would be an appropriate response to this?

Fly machines are Virtual Machines (VM) not Docker Containers. That means there is no Docker host.

we’re using the “Deploy with a Dockerfile” - does that mean the Docker container just runs locally to build? Deploy with a Dockerfile · Fly Docs

Yep. There’s no Docker running inside your Fly Machine; it’s just using your Docker server to do the build.

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.