3 ms·

> what's the point of having a very secure IDE if they immediately run curl|sudo bash Docker is a technology that downloads random unsigned tarballs from the I

• KronisLV 2y ago
  They’re working on signing: https://docs.docker.com/engine/security/trust/ https://docs.docker.com/engine/security/trust/ They have a rootless mode: https://docs.docker.com/engine/security/rootless/ https://docs.docker.com/engine/security/rootless/ Firewall situation is mixed: https://docs.docker.com/engine/network/packet-filtering-firewalls/#integration-with-firewalld https://docs.docker.com/engine/network/packet-filtering-fire... It’s a bummer that those aren’t the defaults, but it would directly make things less convenient and therefore make people less likely to use it (same reason why installing various software is still offered as a Bash script that you curl and pipe to your terminal, e.g. Ollama; at least it’s not offered as the only way usually), what a world.
• Sophira 2y ago
  This is pretty much exactly why I've never used Docker up to now, as cool as it seems.