Comment by teekert
12 hours ago
Do you know about docker compose overwriting your carefully set firewall rules? That’s the other docker thing…
12 hours ago
Do you know about docker compose overwriting your carefully set firewall rules? That’s the other docker thing…
Go on, what other docker things should we know?
Absolutely. Docker is a boiling mess of baked-in convenience workarounds (ie vulns). It's an orchestration layer (like k8s with containers), not a real security boundary like VMs. OTOH, single-purpose VMs are basically just as easy these days and those can still pull in containers as needed.