Docker-in-Docker (DinD)

Docker-in-Docker (DinD)

Running an additional Docker daemon

How it works

Containerized Docker daemon

Requires a privileged container

Disadvantages

Privileged containers enable host breakouts


Demo: Docker-in-Docker (DinD) 040_inception/02_dind

Isolating a Docker daemon:

docker run -d --rm \
  --privileged \
  --name dind \
  docker:dind

docker exec -it dind docker version