hclaria

because once you know how k8s works, you gain so much time and have to deal with much less low-value problems.. I couldn't go back to the old way

Or you could encapsulate OpenVPN inside stunnel to make it indiscernible from regular HTTPS traffic

https://www.perfect-privacy.com/en/manuals/linux_openvpn_ste...

Except giving access to a docker daemon equals giving the root access to the machine

because it's easy to do something such as :

$ docker run -it -v /:/hostfs debian chroot /hostfs

# I'm root !

that's what Intel Clear Containers and KataContainers are trying to do

https://clearlinux.org/news-blogs/intel-clear-containers-now... https://katacontainers.io/