News for hackers. Stuff that matters.
Re:Permissive forwarding rule leads to unintentional exposur... by neoromantique on Wednesday June 22, 2022 @05:12PM (#31841924)
>huge repository of pre-built relatively-trustworthy >relatively-trustworthy

yeah, that's not really the case with docker either I'm afraid

Re:Permissive forwarding rule leads to unintentional exposur... by heywoodlh on Wednesday June 22, 2022 @06:06PM (#31842467)
> yeah, that's not really the case with docker either I'm afraid

I feel like two places I disagree with this statement:

- Docker's official image library

- When a project you are looking to run has an official image they maintain

When those constraints are not met, I try to build my own image (based on the official images).

I try not to trust any other external images (with some exceptions from reputable sources such as linuxserver.io or Bitnami).

Re:Permissive forwarding rule leads to unintentional exposur... by corrral on Thursday June 23, 2022 @09:40AM (#31848974)
Shrug just about every service I want to run has an official image. I use a couple unofficial ones (e.g. Minecraft, and I think my Samba container—oh man, talk about being easier to configure than typical distro packaging—is unofficial) for my personal use and it's pretty easy to read the Dockerfile and build them myself, so that's not a big deal. At work, most any database or self-hosted service or anything like that has an official image.

So yes, it is.