Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

> I always make my user part of the docker group

I don't, and I migrated to Podman because Docker is poorly designed and full of footguns. For example, it it will silently overwrite iptables rules and punch holes in your firewall.



This. It’s easy to let happen too. If you’re on a machine that’s not behind NAT then it’s really easy to pwn yourself.

Indeed. Podman works great. And kube play unifies container orchestration by using k8s manifests for local orchestration instead of a separate DSL like docker compose.

I'm sorry, what?

As an avid Docker user, where should I begin reading about these issues?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github