News for hackers. Stuff that matters.

A comment on Self-Host and Tech Independence: The Joy of Building Your Own. Parent comment

Re:Self-Host and Tech Independence: The Joy of Building Your... by movedx on Sunday June 08, 2025 @06:36PM (#44219905)
That sounds like a great option to me. The more functionality you can get out of a container without giving up privileges, the better. Podman is just a tool like any other - I'd happily use it if it's right for the job.

All I would say is: can you run that same thing without a containerisation layer? Remember that with things like ChatGPT it's _really_ easy to get a systemd unit file going for just about any service these days. A single prompt and you have a running service that's locked down pretty heavily.

[ Parent | on HN ]
Re:Self-Host and Tech Independence: The Joy of Building Your... by feirlane on Sunday June 08, 2025 @08:45PM (#44220474)
Yeah I could run them as regular systemd daemons themselves, but I would lose the easy isolation between different services and main OS. Feels easier to limit what the services have access to in the host OS by running them in containers.

I do run the containers as systemd user services however, so everything starts-up at boot, etc

[ Parent | on HN ]
Re:Self-Host and Tech Independence: The Joy of Building Your... by movedx on Monday June 09, 2025 @07:42PM (#44230897)
You can isolate and lock down services in systemd too! Not too hard at all, and again AI can help here.

https://www.redhat.com/en/blog/mastering-systemd

[ Parent | on HN ]