CuratedHackerNews (@CuratedHackerNews@mastodon.social)
Show HN: Mushak – Zero config zero downtime Docker/Compose to server deployment
Show Original Post
bgme (@bgme@bgme.me)
不知道这算不算是一个 #冷知识
docker run -p 8080:80 [...]
这样不指定 host IP 的端口映射发布默认情况下是不安全的[1]，会 bypass 掉主机防火墙规则。
举个例子：
你有一台服务器，你使用 iptables / UFW / firewalld 配置了如下的规则：
eth0 接口只接受 22/tcp、443/tcp、443/udp 入站连接，除此之外拒绝所有其它入站连接。
你运行了上面的命令启动了一个容器，你可能会认为：因为有上面的防火墙规则存在，通过容器映射发布的8080端口是不能被外部访问的。
但你实际端口扫描一下就会发现外部是可以访问8080端口的。
换而言之，-p 8080:80 会 bypass 掉原有的防火墙规则，让所有接口均能访问8080端口。
这并不是新的问题，搜索一下就会发现11年前就有 reddit 网友遇到同样的问题。
Docker will bypass your firewall by default.
https://www.reddit.com/r/docker/comments/2fftmp/docker_will_bypass_your_firewall_by_default/
当然更有博文介绍解决方法：
How to Fix Docker Bypassing Firewall: A Complete Guide
https://www.bitdoze.com/docker-bypasses-firewall/
最后的最后，配置完服务器之后，一定一定要在外部对服务器做一个全端口的扫描，看看是不是不小心开放了不打算开放的端口。
[1] Port publishing and mapping | Docker Docs
https://docs.docker.com/engine/network/port-publishing/
Show Original Post
lumiworx (@lumiworx@mastodon.social)
Why, yes... you CAN have your very own #networked in-house #streaming media service.
#Linux / #PC / $macOS / #Docker ... ?
Yes / Yes / Yes / Yes
Just 'cause it's winter and 11° F outside doesn't mean you can't find #entertainment.
#Jellyfin #MediaServer #Movies #Music #LiveTV
#RecordedTV
Show Original Post
rusty1281 (@rusty1281@fosstodon.org)
Testing the new #Bitwarden Lite version via #Docker and listening to some #SleepToken (powered by #plexamp ofc!)
#selfhost #selfhosting #homelab #synology
Show Original Post
thoran (@thoran@ostatni.ninja)
Poprosiłem Copilota o zoptymalizowanie mojego Dockerfile, który służy do budowania aplikacji. Przed zmianami budował się do 2GB, po "optymalizacji" miał 2.1GB. I takie to z AI zabawy xD
#docker #dockerfile #devops #selfhosted #strapi #javascript #nodejs #webdev #programowanie #sysadmin #containers #cloud #ai #aidev #fediverse #mastodev
Show Original Post
rcarmo (@rcarmo@mastodon.social)
If you used #watchtower to do automatic #docker image updates in your #homelab and are sad that it's gone, I just got nerdswiped into building my own alternative: https://github.com/rcarmo/guerite
Show Original Post
rcarmo (@rcarmo@mastodon.social)
If you used #watchtower to do automatic #docker image updates and are sad that it's gone, I just got nerdswiped into building my own alternative: https://github.com/rcarmo/guerite
Show Original Post
xceptn (@xceptn@fosstodon.org)
#Docker makes its entire catalog of security-hardened container images free for everyone - SiliconANGLE https://siliconangle.com/2025/12/17/docker-open-sources-entire-catalog-hardened-images-making-free-everyone/ #security
Show Original Post
AlexanderGG (@AlexanderGG@mastodon.social)
Minecraft Server Runtime (Docker)
* entrypoint.sh only reads environment variables
* Doesn't black-box the startup logic
* World generation conditions remain unchanged even after restarting
* Designed with Docker / Compose / Kubernetes in mind
More than just "working,"
**we prioritize building something that doesn't break and remains manageable during long-term operation.**
#Minecraft #Docker #Kubernetes #OSS
Show Original Post
admin (@admin@mastodon.raddemo.host)
How to Install #Docker Engine on #Ubuntu #VPS Server This article provides a guide for how to install Docker Engine on Ubuntu VPS server.
What is Docker?
Docker is an application that utilizes OS-level virtualization to provide software in bundles called containers. While you can run Docker on any VPS, Ubuntu remains its most popular OS of choice.
Containers provide an application's code, dependencies, libraries, and ...
Continued 👉 https://blog.radwebhosting.com/how-to-install-docker-engine-on-ubuntu-vps-server/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #vpsguide #installguide #kvmvps
Show Original Post
clonbg (@clonbg@masto.es)
Portainer, magnífico gestor para Docker https://myblog.clonbg.es/portainer-magnifico-gestor-para-docker/ #Servicios #Docker https://clonbg.es
Show Original Post
devto_vn_bot (@devto_vn_bot@mastodon.maobui.com)
Thực hành tối ưu hóa container: Giảm hàng trăm MB trong hình ảnh AI và Java bằng cách dọn dẹp phụ thuộc, loại bỏ lớp không cần thiết, dùng base image nhỏ, và hiểu rõ từng lớp trong Docker. Tối ưu không chỉ vì hiệu suất, mà còn vì thiết kế rõ ràng, dễ bảo trì. #ContainerOptimization #Docker #Java #AI #MLOps #TốiƯuContainer #Java #AI
Show Original Post