Further enhance security for socket-proxy usage with this one wierd trick
    • tofuOPEnglish
      1·
      2 months ago

      Good question, I don’t know if Podman has a thing like Docker socket

      • Static_Rocket@lemmy.worldEnglish
        5·
        2 months ago

        It does, but it’s disabled by default. It’s explicitly for docker compatibility though, not a core part of the application.

  • ikidd@lemmy.worldEnglish
    2·
    1 month ago

    I’ve seen this done with namespaces as well. Which should work for podman.

      • ikidd@lemmy.worldEnglish
        3·
        1 month ago

        userns-remap I remember seeing another method that was more manual that would have worked for Podman, but I can’t seem to find it now.

  • Cratermaker@discuss.tchncs.deEnglish
    1·
    1 month ago

    Hmm this seems like a solution to an extremely specific problem that may have been created by using docker for things outside its wheelhouse. Why would I have docker automation that I only trust to do specific things?

    • tofuOPEnglish
      2·
      1 month ago

      You might want a nice overview dashboard of your docker services but the tool shouldn’t be able to interfere. I think homepage (the tool) was mentioned as an example since they have a docker integration that only needs reading access