From cec93b8a3e4e7ccc9f988f7b2d6763fd204e4b5e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pawe=C5=82=20Gronowski?= Date: Mon, 27 Jul 2026 20:29:39 +0200 Subject: [PATCH] daemon: Document Unix socket setup on Windows MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Show the Engine 29.5 opt-in listener and matching client endpoint. Explain group access and why the socket should use a user-profile path. Signed-off-by: Paweł Gronowski --- content/manuals/engine/daemon/_index.md | 27 +++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/content/manuals/engine/daemon/_index.md b/content/manuals/engine/daemon/_index.md index 32fcab96287a..fa9f30362b11 100644 --- a/content/manuals/engine/daemon/_index.md +++ b/content/manuals/engine/daemon/_index.md @@ -84,6 +84,33 @@ $ dockerd --debug \ --host tcp://192.168.59.3:2376 ``` +#### Listen on a Unix socket on Windows + +Starting with Docker Engine 29.5, you can configure `dockerd` on Windows to +listen on a Unix socket. This setting is optional. The default Windows endpoint +remains the `npipe` named pipe. + +Run `dockerd` from an elevated PowerShell session: + +```powershell +PS C:\> dockerd -H unix://C:/Users//docker.sock --group docker-users +``` + +Replace `` with the name of your Windows user profile directory. +Without `--group`, only members of the Administrators group and the `SYSTEM` +account can access the socket. Use a comma-separated list to grant access to +multiple users or groups. + +Use a path in the user profile when granting access with `--group`. A socket +created directly under `C:\` can inherit a high integrity level that blocks +access for the configured users and groups. + +Configure the Docker client to use the same socket: + +```powershell +PS C:\> docker -H unix://C:/Users//docker.sock info +``` + Learn about the available configuration options in the [dockerd reference docs](/reference/cli/dockerd.md), or by running: