3 ms·
Do you know about docker compose overwriting your carefully set firewall rules? That’s the other docker thing…
by teekert 1mo ago
Do you know about docker compose overwriting your carefully set firewall rules? That’s the other docker thing…
- dotancohen 1mo agoGo on, what other docker things should we know?
- superq 1mo agoAbsolutely. Docker is a boiling mess of baked-in convenience workarounds (ie vulns). It's an orchestration layer (like k8s with containers), not a real security boundary like VMs. OTOH, single-purpose VMs are basically just as easy these days and those can still pull in containers as needed.