Docker Permission Denied on /var/run/docker.sock

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Docker commands fail for non-root users, disrupting development and deployment workflows.

Environment & Reproduction

Ubuntu 20.04 systems with Docker Engine installed and regular users invoking `docker` CLI.

Root Cause Analysis

User lacks membership in docker group or session has not refreshed group assignment.

Quick Triage

Inspect socket ownership/mode and verify current user groups in active shell.

Step-by-Step Diagnosis

Confirm daemon status, group existence, and PAM/session propagation after group updates.

Solution – Primary Fix

Add user to docker group, re-login, and validate secure non-root socket access.

Solution – Alternative Approaches

Use rootless Docker mode or `sudo` policy controls for stricter privilege boundaries.

Verification & Acceptance Criteria

`docker ps` works without sudo and daemon access obeys intended account controls.

Rollback Plan

Remove user from docker group if elevated container control is not acceptable.

Prevention & Hardening

Review docker group membership regularly and restrict on shared multi-user hosts.

Related Errors & Cross-Refs

`Got permission denied while trying to connect to the Docker daemon socket`.

Related tutorial: View the step-by-step tutorial for Ubuntu 20.04 LTS.

View all Ubuntu 20.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Docker post-install Linux guidance and Ubuntu service account security practices.