4 ms·
What? No. Curl piping into bash will trivially steal all of your data at once. Running a container from dockerhub is much safer, provided you do not give it p
by theamk 8y ago
What? No.
Curl piping into bash will trivially steal all of your data at once.
Running a container from dockerhub is much safer, provided you do not give it privileges using --privileged or bind-mounting system files like docker control socket.
If your system is up to date and there are no docker 0-days active, the worst "docker run --rm -it RANDOM-CONTAINER" can do is to use too much resources -- your local secrets would be safe.
- orthecreedence 8y ago...unless said docker container is running an app server that has direct access to your database.
- walrus01 8y agoIt is kind of disturbing that apparently a huge number of people installed these Docker containers and did not care to notice that they were using 100% CPU on all available cores, 24x7.