alt Hacker News> I always make my user part of the docker group
I don't, and I migrated to Podman because Docker is poorly designed and full of footguns. For example, it it will silently overwrite iptables rules and punch holes in your firewall.
Replies
PuercoPop • yesterday at 8:39 PM
Indeed. Podman works great. And kube play unifies container orchestration by using k8s manifests for local orchestration instead of a separate DSL like docker compose.
dotancohen • yesterday at 9:32 PM
I'm sorry, what?
As an avid Docker user, where should I begin reading about these issues?
➕ show 1 reply
This. It’s easy to let happen too. If you’re on a machine that’s not behind NAT then it’s really easy to pwn yourself.