*sigh
#Proxmox and #Docker are sometimes a real challenge but disabling AppArmor _because_ of a critical security fix is certainly a new one: https://blog.ktz.me/apparmors-awkward-aftermath-atop-proxmox-9/
> error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: reopen fd 8: permission denied: unknown
MCP Horror Stories: The WhatsApp Data Exfiltration Attack
#Products #Docker #MCP #MCPserver #Security
https://www.docker.com/blog/mcp-horror-stories-whatsapp-data-exfiltration-issue/
It appears that the latest version of Portainer has a significant bug that prevents access to the local server environment, meaning you cannot manage your containers.
Until the developers fix the problem, the temporary solution is to use version 2.20.2.
https://github.com/portainer/portainer/issues/12925
#selfhosting #docker #portainer
Do your containers live like cats - sleep all day and cause chaos at night?
I finally found a tool that actually tames them 😂
Sablier automatically pauses idle containers and starts them again on the first request.
This saves CPU, RAM, energy, and your sanity - perfect for homelabs, side projects, test environments, and anything that shouldn’t run 24/7.
It works with Docker, Kubernetes, Traefik, Nginx, Caddy, Envoy and more.
https://github.com/sablierapp/sablier
#DevOps #Kubernetes #Docker #FOSS

Docker Desktop 4.50: KI-Integration und kostenlose Debug-Tools für Entwickler
Docker Desktop 4.50 bietet kostenlose Debug-Tools, erweiterte KI-Features und verbesserte Sicherheitsoptionen für Entwickler von Container-Anwendungen.
#Containerisierung #Docker #IT #KünstlicheIntelligenz #news
Quick blog post about some quirks I found while switching from #docker to #podman:
https://kaesebrot.eu/posts/2025-11-13_docker-podman/
New #container sidechannel alert! #sydbox is not affected because hardened proc(5) does not allow access to /proc/self/ns directory by default. In addition, unlike #docker, #sydbox supports time namespace with the unshare/time command. https://h4x0r.org/funreliable/ #linux #security
Debugging containers that have no shell
https://docs.docker.com/reference/cli/docker/debug
AWS App Runnerで簡単にコンテナアプリを実装する
https://qiita.com/YuNagura/items/d42f2cd6c60d9723931e?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items
#qiita #AWS #Docker #駆け出しエンジニア #AppRunner #BIPROGY_AWS_Ambassador
Oh, I just discovered that my public #UptimeKuma instance had reported all services to be down ... That is kinda weird, as everything seemed to be working and my instance at home had reported everything to be fine. Restarting the #Docker container resolved the issue. It was reported as an error in resolving the domain names.
Docker Engine 29: containerd diventa default, arriva il supporto a nftables
La nuova release di Docker segna un cambio di passo significativo:
containerd è ora il runtime predefinito, consolidando l’integrazione con l’ecosistema CNCF.
Introdotto il supporto sperimentale a nftables, che apre la strada a una gestione del networking più flessibile e sicura.
https://linuxiac.com/docker-engine-29-containerd-becomes-default-experimental-nftables-support/
#Docker #Nftables #Linux #DevOps #CloudNative #OpenSource

#fork de #watchtower pour #docker
beatkind/watchtower: A process for automating Docker container base image updates.
https://github.com/beatkind/watchtower/