I manage a multi-user workstation (Windows) server for a small student organisation. One of the students asked me to install docker, as it would simplify his workflow. As this is on a shared workstation, I'm concerned about security. On linux, if you have access to docker, you effectively have root permissions. I am aware that docker on windows has two backends; WSL2 and Hyper-V. I am considering the latter as the OS is Windows Server 2019 (no WSL2) and we have already several VMs. I will probably upgrade to 2021 in a few months after it is available.
I have read, that docker for desktop is by defult for admins only, but I could not find a reason why that is. I intend to create a docker group and allow only specific non-admin users. I assume that any program breaking out of docker inside the VM has no access to the host OS itself. My next assuption is that Windows permissions are enforced when mounting/sharing a folder to a docker container.
Is it secure/good idea to allow docker in this environment?