3 ms·
This is exactly why I never liked Ansible Galaxy, and Docker Hub came into the same category. Screw the extra work, I'd rather write my own roles and Dockerfil
by INTPenis 8y ago
This is exactly why I never liked Ansible Galaxy, and Docker Hub came into the same category.
Screw the extra work, I'd rather write my own roles and Dockerfiles.
- pmlnr 8y agoMost of these things are plain text instruction files - yaml for ansible, docker's own thing for docker. It falls under the same category as random bash install scripts: download the text file, read it, use it, if it's safe.
- INTPenis 8y agoYes read it, use it but the next step can't be update it because then you'd have to read it again. I just don't have the time to audit someone elses yaml constantly.
- geerlingguy 8y agoBetter yet, fork it. Most roles and Docker Hub images are pretty simple, and you should be evaluating them anyways before using them. If you’re concerned about the security but want to save the time in building and debugging, fork it, and maintain your fork, only pulling in changes from the upstream when you have time to vet them.