reddit_tech_vn_bot (@reddit_tech_vn_bot@mastodon.maobui.com)
Tái thiết server sau 3 năm, tìm lời khuyên về cách tự lưu trữ & sao lưu. Sử dụng Docker Compose + Cloudflare. Apps: Miniflux, Vaultwarden, Nextcloud, Gitea, AdGuardHome, Linkding, NTFY, Syncthing,... Hỏi: Tool sao lưu Docker (Restic, Kopia, Offen?)? Bind Mount hay Named Volume? Doppler có an toàn? Phương pháp backup & nhân rộng server? Chia sẻ kinh nghiệm nhé! #selfhosting #docker #backup #cloud #server #VietnamTech #CôngNghệViệt
https://www.reddit.com/r/selfhosted/comments/1pqtfyp/seeking_best
Show Original Post
links (@links@gts.lmorchard.com)
I got hacked, my server started mining Monero this morning. | Unfinished Side Projects
"TL;DR
Umami analytics (built with Next.js) had an RCE vulnerability.
Got exploited, installed cryptominers
Mined Monero for 10 days at 1000%+ CPU
Container isolation saved me because it ran as non-root with no mounts
Fix: docker rm umami and enable firewall
Lesson: Know what your dependencies are built with, and configure containers properly"
https://blog.jakesaunders.dev/my-server-started-mining-monero-this-morning/
#containers #dev #docker #nextjs #security #umami
Show Original Post
patnat (@patnat@social.tchncs.de)
Die von mir entwickelten Container-Images für unsere Anwendungen wurden heute mit einem Ferrari verglichen 🥰 
#devops #sysadminAlltag #docker #podman
Show Original Post
redstar (@redstar@m.hirad.it)
Goodbye containrrr/watchtower! · containrrr/watchtower · Discussion #2135 · GitHub
https://github.com/containrrr/watchtower/discussions/2135
Show Original Post
resmo (@resmo@mstdn.social)
Users of #watchtower #docker containrrr/watchtower: the git repo was archived yesterday, please head over to the acitve fork: https://github.com/nicholas-fedor/watchtower
Show Original Post
jpaskaruk (@jpaskaruk@growers.social)
#Docker tip so you don't need to join the security-lazy herd. The tip is at the bottom and it's how to run as root inside the container, which I took a day to figure out because I did not have my brain engaged while following along in a slightly-incomplete tutorial.
I read a while back that using the docker group for your user account, which enables you to run docker commands without sudo, is equivalent to giving all your containers root access. I did not read into the details, but made note to not do that, out of abundance of caution.
Meanwhile, everyone who heard about this One Weird Trick to Streamline your Terminal Operations or whatever bullshit immediately started using it, including a lot of devs who should know better.
Which brings me to yesterday when I was trying, once and for all, to sort out doing hardware decoding in my #Jellyfin container. It recommends running your container as your user, so in theory the docker group is safe for this deployment, but I don't do that, so,
I end up with a situation where I need to run ldconfig as root in the container,, but even though I run sudo docker etc, in the container I'm just 1000:1000 like a chump, and cannot do the rooty things, nor can I sudo.
The solution is you can add --user root to your sudo docker command, and that will do the root stuff inside your container.
Show Original Post
blablalinux (@blablalinux@mastodon.blablalinux.be)
Résultat : Tous les services sont déjà en version "latest". On ne change pas une équipe qui gagne... même quand le capitaine oublie la tactique ! 🐧💻
Show Original Post
herzenschein (@herzenschein@furry.engineer)
One feature I'd like for my container management is "assign a random host port" a.k.a. "don't care mode" since I use internal container networking for (almost) everything with podman.
Is that a thing that exists?
Show Original Post
n1 (@n1@fosstodon.org)
Using a startup script for your Docker containers to do some preps before your app kicks off? Use exec to kick off the app. Exec replaces bash with your app, so your app becomes PID 1 and receives signals directly.
Here is a small example for Django framework.
Show Original Post
labrafa (@labrafa@mastodon.world)
Tengo publicado en Youtube un tutorial donde explico las cosas a tener en cuenta para la instalación de la herramienta #Docker bajo #Linux #Ubuntu.
Mejora tu eficiencia y productividad!
Nota: imagen generada con IA generativa.
Show Original Post
admin (@admin@mstdn.feddit.social)
funkwhale+Spotify歌单同步脚本+“Spotify下载器”
https://ghost.feddit.social/funkwhale-spotify-playlist-sync-downloader
#docker #blog #ghost #博客 #Spotify #playlist #downloader
Show Original Post
christianrickert (@christianrickert@23.social)
Desperate move by #Docker. #freebies
https://www.heise.de/news/Docker-Inc-macht-gehaertete-Abbilder-kostenlos-verfuegbar-11118764.html
Show Original Post