Merge pull request #29485 from ericcurtin/remove-prompt-add-docker-group

Don't encourage adding user to docker group
Upstream-commit: 06e3812b6e50f63b13b9a6eefb012da83f6283ab
Component: engine

components/engine/hack/install.sh

@@ -137,6 +137,12 @@ echo_docker_as_nonroot() {
 
 	Remember that you will have to log out and back in for this to take effect!
 
+	WARNING: Adding a user to the "docker" group will grant the ability to run
+	         containers which can be used to obtain root privileges on the
+	         docker host.
+	         Refer to https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface
+	         for more information.
+
 	EOF
 }