Search results for query: docker

...get up to speed quick enough. When I had to create working systems to a deadline, I went back to what I know, iocage+Ansible on FreeBSD and Docker on Void Linux. I am not done with AppJail. I will go back to it. I probably would have settled in quicker if I had a worked example that was...

...them to be built exactly the same way as in upstream. You can compare: https://github.com/appJail-makejails/postgres (upstream) https://hub.docker.com/_/postgres https://github.com/AppJail-makejails/nextcloud (upstream) https://hub.docker.com/_/nextcloud...

Spot on. I know a few Solaris admins by mere chance but they are phasing it out anyway. One AIX and zero FreeBSD, not counting PFSense and Playstations, lol. Linux admin is very broad term. Distros can be pretty different with their special quirks, tho. I do not know how US centrist is...

...- I cannot force FreeBSD in my org who deals with big European government projects, where Linux is used, where Kubernetes is used, where Docker is used and where Nix is used, because, technically, theoretically, FreeBSD is able to do it all, but who's gonna support that? Me? Hell no. Go to...

you can run docker and kubernetes under lxd without them being mapped to root .....

Docker runs under root. But the main problem is it's whole reason for existence is that developers can splice together unpatched libraries, so usual system maintenance won't touch them.

why do you say this? docker and kubernetes are usually not so bad in terms of security

...you will find bugs in declarations or missing features. Especially if it is badly documented as you say. Linux survives in servers because of Docker and kubernetes. But these are security nightmares and will go away. Maybe the French gov thinks that with Mistral Ai they can pull it off...

...want is DNS names, as opposed to IPs. Not sure if this helps, but there is experimental support for DNS using local-unbound for Bastille. https://bastille.readthedocs.io/en/latest/chapters/networking/dns.html This allows jail to jail resolution for NAT jails. Kind of like docker networking.

JohnK Thx for the suggestion. I'll check out BSD POT. The problem I'm trying to solve is this: Say I have a simple webapp, a service, and a database. In this example, I want to expose the webapp and the service to the internet, but not the database (postgres). I also want to enforce ip, port...

...My new system is designed much like a bottom-up design you'd do in Lisp (see: structure and intreptation of computer programs) but in C. You may also want to check out BSD POT as a jail manager. Their templates are setup more docker like. I believe AppJail also has something along these...

I'd begin by pointing out that the the comments you make about your failed experiments are too vague for anyone to offer much help. You briefly mention some approaches you attempted and technologies you tried, but then don't offer any details about what exactly you did in each case, what...

Short sight. I am currently using redcore(gentoo) linux . Not one docker/podman/lxc/kubernetes/AppImage/Flatpak/Snap

Yes but now it seems you can't run anything from or on Linux unless it's within Docker which is my point.

Then don't use Docker for everything. I see people running Docker because...because...er...uh... I've read a number of articles where people seem to run Docker "...because you're supposed to. Aren't you?" and no other reason. On the other hand, a number of programs can run on FreeBSD using...

...however, use FreeBSD extensively on servers because, in my opinion, it just works better than Linux as a server unless you are planning to use Docker for everything. Between native first-class support for ZFS, pf, jails, choice between quarterly/latest/poudriere, there is just nothing in the...

...revisit all of this stuff when its actually relevant b/c I need to scale. * Do I need my custom fancy jail deployment system that is like docker for freebsd? No. * Do I need dev/stage/prod right now? No. * Do I need hierarchical jails (for dev/stage/prod)? No. * Do I need bridges, vlans...

...have to say that configuration scripts are absolutely and unequivocally necessary for the future of AI. A misconfiguration of your AI ... docker image frankenstien thing ... may lead to your network hacking itself into oblivion, and will lead to an inevitable infrastructure doomsday event...

...prefer to deal with. The alternative (if doing this properly) is Linux+Busybox which isn't particularly better. Though if all it is doing is using the Linuxulator anyway. Then just like emulating Docker (= Linux) on FreeBSD, I am not convinced at the benefits. The Linuxulator does have overhead.

...- expecting rug-pull. Besides I dislike the systemd philosophy and defaulting to SNAP packages. Both are security nightmares in waiting (as is Docker btw or anything running under root like Podman for FreeBSD). Debian has the systemd issue and the Devuan branch or Slackware are too...