Re:pnpm: Fast, disk space efficient package manager for Java...
by 5e92cb50239222b on Tuesday April 05, 2022 @03:43PM
(#30923976)
Containers don't provide much protection from malware, unless you're running it rootless under an unprivileged user (no sudo access, no ssh keys or anything else interesting in the home directory, etc; and even then it's limited because the attack surface is enormous).
[ Parent
| on HN ]
Re:pnpm: Fast, disk space efficient package manager for Java...
by trulyme on Tuesday April 05, 2022 @04:01PM
(#30924219)
I mean, of course? Especially, why would I put ssh keys and similar in the container?
This still doesn't mean that one can install just any package, but it does make it much more difficult for it to do much harm. Breaking out of a container is not as trivial as it once was. That said, it is not a perfect solution, so I'd be happy to hear of better ones. Any suggestions?
Re:pnpm: Fast, disk space efficient package manager for Java...
by 5e92cb50239222b on Thursday April 07, 2022 @09:43AM
(#30944323)
No ssh keys or anything else interesting available to the user you're running the container engine under (and containers themselves). Not the user _inside_ the container, but on the main system.