Docker and Jenkins security

Hi All,

Sorry if this has been asked before. Hope you can help.

We plan on allowing users to run Jenkins from within containers that will execute Docker commands.

I understand that we are essentially opening up superuser access to the host due to the fact that you can mount the disk’s root partition to the host, amongst other things, when you have access to the Docker command.

What’s the best ways to protect Docker from Jenkins?

Thanks,

Chris