3 ms·
> has issues with different runtimes per container Could you be more specific about that? > One of those apps will get compromised and then all the others wil
by crabmusket 20d ago
> has issues with different runtimes per container
Could you be more specific about that?
> One of those apps will get compromised and then all the others will follow...
Per their security docs, containers are rootless but I don't see anything about VLAN isolation.
https://cloudinabottle.org/docs/how_it_works/security.html https://cloudinabottle.org/docs/how_it_works/security.html
- Jnr 20d agoKubernetes supports multiple pluggable container runtimes per node. Can be quite useful when requiring some virtualization or running certain docker-in-docker scenarios for CI/CD workers. Maybe it can be done with Docker as well these days, but with kubernetes it is out of the box support. Perhaps you could manually set up some VLANs and set up Docker networking to use those, but that has to be custom setup, none of that is a standard feature of Docker. So instead of having to reinvent the wheel for each of those problems, you can just take kubernetes instead. And while it is a lot to learn, LLMs can make it a lot easier to do. For years I was running docker-compose stacks for self hosted things, but I replaced that once LLM agents became a bit less stupid. :)