plugin_privileges
Review which host privileges a Docker plugin requests before you install it, without installing anything.
Instructions
Ask the registry which host privileges a not-yet-installed plugin demands.
The review step before plugin_install, which grants these privileges non-interactively (the
daemon never prompts) — so this is the only chance to see what a plugin wants before it has it.
Worth checking for anything not already trusted: plugins routinely request host mounts, devices,
and elevated capabilities, and a granted privilege is host-level access, not container-scoped.
Reads the remote plugin from its registry and installs nothing; for the privileges of a plugin
already installed, read Config from plugin_inspect instead. Credentials come from
system_login, or from ~/.docker/config.json if the host ran docker login. Raises if the
reference cannot be resolved in the registry.
args: remote - Registry plugin reference, author/name:tag; the :latest tag is optional and
is the default if omitted
returns: list - One dict per requested privilege ({"Name", "Description", "Value"}), e.g. Name
"mount" with Value ["/data"], or "capabilities" with Value ["CAP_SYS_ADMIN"]; empty if the
plugin requests none
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| remote | Yes |