docker/: install rootful Docker; gate kind on it

kind never worked reliably against rootless Docker on Kasm, even with the
cgroup delegation from docker-rootless-cgroup/. So install full Docker
where we can, and flip bin/'s kind gate from "rootless is available" to
"a rootful daemon answers" — kind is simply skipped on Kasm now.

docker/install.sh no-ops when a rootless daemon is already running so it
never fights Kasm's setup. It runs before bin/ in bootstrap so the kind
gate can see the daemon it just started. zsh/zshrc re-execs via newgrp
when the account gained the docker group but the live shell predates it.

docker-rootless-cgroup/ keeps its delegation (still useful for
per-container resource limits); only its kind-centric comments change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-07-12 04:39:58 -04:00
co-authored by Claude Opus 4.8
parent ddeb73fd1c
commit 3751836c5c
5 changed files with 97 additions and 16 deletions
+2
View File
@@ -31,6 +31,8 @@ fi
"$SCRIPT_DIR/zsh/install.sh"
"$SCRIPT_DIR/git/install.sh"
# Runs before bin/ so the kind install gate can see the rootful daemon.
"$SCRIPT_DIR/docker/install.sh"
"$SCRIPT_DIR/bin/install.sh"
"$SCRIPT_DIR/ansible/install.sh"
# Runs last: needs rootless Docker already up (started at boot) so it can