3 ms·
I use AppArmour and use Podman rootless for everything that needs to be containerized so it's all good for me anyway :) Fun read! Maybe put an RSS button somew
by smbv 5y ago
I use AppArmour and use Podman rootless for everything that needs to be containerized so it's all good for me anyway :)
Fun read! Maybe put an RSS button somewhere so it's easier to subscribe to?
- jordyzomer 5y agoThanks very good suggestion! I'll take a look if Hugo has a feature for that otherwise I 'll edit the templates :D
- WhyNotHugo 5y ago> Podman rootless This is the way. Docker rootless and podman rootless. A lot less attack surface than running containers as root. I haven't tried a dedicated user for this though. I'm sure that mounting volumes would get messed up.
- 2OEH8eoCRo0 5y agoI run services like Plex or DNS adblocker in this manner. Each service gets its own user to run rootless under and inside the container the app doesn't run as root. Security is layers.