3 ms·
I like Linux a lot but personally I am starting to get frustrated with rootless containers. It is frustrating one has to have higher privileges running the cont
by plagiarist 2y ago
I like Linux a lot but personally I am starting to get frustrated with rootless containers. It is frustrating one has to have higher privileges running the container to make it have its own IP address inside the container. It's frustrating you cannot have the container read and write on the filesystem as the UID running the container unless the process inside is root.
I might have a better experience with VMs but every system seems like a lot of effort to just get something running. And after that the object is not as disposable as I'd like. My favorite tool for VMs so far is Incus. I'm planning on looking into Firecracker this weekend for fun.
Unrelated, but regarding:
> I understand it can make some people angry as they have to learn how to use it.
I don't think that's a significant part of what is upsetting anyone.
- 1oooqooq 2y agobecause containers are not the solution you want. That is just Docker Enterprise marketing at this point. Future of desktop security is on namespaces and bind, etc. Use aparmour, firejail, systemd unit file hardening. You will suffer less. Containers and flatpacks are much more convenient, but only because you are not getting what you think you are getting. so.