Further enhance security for socket-proxy usage with this one wierd trick
      • Static_RocketEnglish
        5·
        1 month ago

        It does, but it’s disabled by default. It’s explicitly for docker compatibility though, not a core part of the application.

  • ikiddEnglish
    2·
    30 days ago

    I’ve seen this done with namespaces as well. Which should work for podman.

      • ikiddEnglish
        3·
        29 days ago

        userns-remap I remember seeing another method that was more manual that would have worked for Podman, but I can’t seem to find it now.

  • Cratermaker@discuss.tchncs.deEnglish
    1·
    30 days ago

    Hmm this seems like a solution to an extremely specific problem that may have been created by using docker for things outside its wheelhouse. Why would I have docker automation that I only trust to do specific things?

    • tofu@lemmy.nocturnal.gardenOPEnglish
      2·
      29 days ago

      You might want a nice overview dashboard of your docker services but the tool shouldn’t be able to interfere. I think homepage (the tool) was mentioned as an example since they have a docker integration that only needs reading access