4 ms·
I learned this a few months ago too. It's such a weird, stupid system. But everyone seems to think this is pretty normal. I think the firewall is my business,
by skerit 4y ago
I learned this a few months ago too.
It's such a weird, stupid system. But everyone seems to think this is pretty normal.
I think the firewall is my business, and nothing else should automatically open ports in it. Especially not docker.
- izacus 4y agoYep, learned that the hard way when it trashed my server UFW config as well. It felt kinda wierd to have a tool change machine configuration in such a way (even VMs generally don't do that?), but what do I know, I still prefer to deploy single binary services.
- bionade24 4y agoThis is not about being unnormal, this is a design decision. Just because people use docker in the "tradional admin way", too doesn't mean it's a wrong decision to do this. Wishful thinking about what a command of a software does without looking it up is generally dangerous. There are abstractions to help people that don't want to bother, e.g. portainer.
- Brian_K_White 4y agoViolates least surprise.
- xboxnolifes 4y agoAccomplishes least resistance.
- Brian_K_White 4y agoLeast resistance is of no legitimate value by itself. It's a goal only within the bounds of other constraints. The examples are literally countless.