[christop]

Do the Docker containers that builds run in still provide root access to the Docker socket, allowing people to break out of the container?

[thebloodrabbit]

You have passwordless sudo access on the Docker containers, however when you kick off a new build we will create a new VM just for the build and start the docker container inside it, making sure that nobody can ramble around :)

[christop]

Thanks. Is this setup with the per-build VM and Docker server access intended so that users could set up multiple linked containers for integration testing, etc.?

[birmacher]

Yup, we wanted to give you full access during the build, to achieve whatever you would like to do.