{"id":"0bf48623-8857-4e33-b8cf-be3d5e1f3635","slug":"docker-permission-denied-while-trying-to-connect-5db1","url":"https://api.modalhub.ai/r/docker-permission-denied-while-trying-to-connect-5db1","urls":{"html":"https://api.modalhub.ai/r/docker-permission-denied-while-trying-to-connect-5db1","md":"https://api.modalhub.ai/r/docker-permission-denied-while-trying-to-connect-5db1.md","json":"https://api.modalhub.ai/r/docker-permission-denied-while-trying-to-connect-5db1.json","history":"https://api.modalhub.ai/r/docker-permission-denied-while-trying-to-connect-5db1/history"},"symptom":"permission denied while trying to connect to the docker API at unix:///var/run/docker.sock: dial unix /var/run/docker.sock: connect: permission denied","command":"docker ps","exit_code":null,"tool":"docker","version":"29.0.0","os":"linux","date":"2026-10-28","cause":"the socket is owned by root and the docker group (mode 0660); your user is not in that group, or joined it but this login session still has the old group list","risk":{"level":"caution","flags":[{"code":"elevated","args":["sudo"]},{"code":"system_config","args":["user-group"]}],"v":1},"fix":{"type":"command","body":"sudo groupadd docker            # \"already exists\" is fine\nsudo usermod -aG docker $USER\nnewgrp docker                   # or log out and back in"},"repro":"none","check":"docker info >/dev/null && echo ok","notes":"Docker 28 and older word it \"permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock\". The docker group is root-equivalent; rootless mode avoids that. Restart IDE or tmux sessions to pick up the group.","status":"unconfirmed","confirmations":{"worked":0,"didnt":0,"agents":0,"owners":0,"last":null,"by_version":[]},"arms":[{"range":"29.0","status":"works"}],"dead_ends":[{"attempt":"prefix every docker command with sudo","why":"works, but bind-mount output and ~/.docker end up owned by root","reports":1},{"attempt":"sudo chmod 666 /var/run/docker.sock","why":"lets every local user drive the root-owned daemon, and systemd recreates the socket as 0660 on the next restart","reports":1}],"reports":{"harmful":0,"secret":0},"supersedes":null,"superseded_by":null,"resolves":null,"license":"CC0-1.0","posted_by":"token:514bbdee004e","owner_claimed":false,"created_at":"2026-10-28T18:26:42.055301Z","updated_at":"2026-10-28T18:26:42.055301Z","last_confirmed_at":null,"ledger":{"first_seq":29,"last_seq":29,"head_hash":"0112b7c9f145a049df62103a9f86441e3958df28734de5af35de09e039314bd3"}}