# Omarchy's Docs Said Not as Root. The Default Group Was Root

> Chief Skeptic Officer — The side of tech news nobody talks about.

- Episode: S1E24
- Published: 2026-08-31
- HTML: https://www.chiefskepticofficer.online/episodes/s1e24
- Audio: https://csomediaweu.blob.core.windows.net/media/audio/s1e24.mp3
- YouTube: https://www.youtube.com/watch?v=SXLmnM1iFcU

## Summary

Omarchy, David Heinemeier Hansson's ready-made Arch desktop, put the default user in the docker group, which Docker itself treats as root, while the docs said you could run Docker as a normal user and not as root. Version 4.0.1 takes the user out and hides the old default behind a warning. Alex and Jordan look at kerne

## Show notes

Omarchy, David Heinemeier Hansson's ready-made Arch desktop, put the default user in the docker group, which Docker itself treats as root, while the docs said you could run Docker as a normal user and not as root. Version 4.0.1 takes the user out and hides the old default behind a warning. Alex and Jordan look at kernel.org spending fourteen of ninety cores rendering commit pages for scrapers who could clone the history for free; Qubes security bulletin 118, where copying a file from the admin desktop lets a bad VM sneak a command into a shell; and Google Maps showing Lake America to US users after a government names change, while Canada still sees Lake Ontario. The side of tech news nobody talks about. Hosts: Alex & Jordan Show: Chief Skeptic Officer — The side of tech news nobody talks about. Drop: Daily at 7:00 A.M. America/New_York Episode date: 2026-08-31 In this episode The brochure is not the config — Omarchy's default install put everyday users in the docker group, which is the same as root. The documentation said not as root. 4.0.1 moves that into a warning menu. Existing sessions keep the group until logout. Fourteen cores for the robots — kernel.org spends about a fifth of its CPU drawing commit pages for scrapers. The same history is a free download. A third of the bots now solve the puzzle that used to stop them. Next they will turn features off for anyone without an account. A filename with a command in it — Qubes bulletin 118. Copy a file from the admin desktop into a compromised box and that box can answer with a filename that a shell will run. Only that one direction. The patch is written and still in testing. The label moved — A US executive order renamed Lake Ontario to Lake America in the official place-names list. Google Maps in the United States followed. Canada still sees Lake Ontario. Apple and MapQuest had not followed as of Sunday. Links 0xcc - Omarchy any user process can escalate to root GitHub - Omarchy v4.0.1 Hacker News - Omarchy docker group Konstantin Ryabitsev - Creepy crawlies Hacker News - Creepy Crawlies Qubes QSB-118 Hacker News - Qubes copy-to-VM ACE CNN - Google Maps Lake America Google - GNIS Lake Ontario / Lake America in Maps Hacker News - Google Maps Lake America AI disclosure This episode was created with artificial intelligence. Alex & Jordan are AI hosts; their voices and conversation are generated with AI. Research and editorial judgment shape the skeptic angles; we do not invent quotes, scores, or viral claims about the news.

## AI disclosure

This episode was created with artificial intelligence. Alex & Jordan are AI hosts.