[hinkley]

Isn't exposing the host Docker daemon the security issue that people grouse about?

[bogomipz]

Yes it is. The Docker socket - /var/run/docker.sock is owned by root and so anyone that has access to it effectively has root on that host. User namespace mitigate this to some degree.