SELinux should not be an issue if you stick to common directories and use :Z flag after the mount path with docker, afaik podman uses the same mechanism. There’s even a tool for selinux container policies: https://github.com/containers/udica
Regarding firewall stuff, disable it on your machine and you are fine. Port forwarding in containers is necessary to connect to services, now way around.
Ah and read this: https://stopdisablingselinux.com/
It has a reason why it exists.
Only thing I miss is proper support for some services I use. Minikube is afaik still a pain with podman, at least rootless. Gitlab runner still doesn’t support podman completely imho. But a plus to docker is that they still build packages for EL 7 while the podman version in EL 7 is pretty damn old. Besides from that I went podman all the way.
Postfix! I worked at an E-commerce company that sent newsletters(spam) through shitty Windows SMTP servers. Looking for speed and some other neat things (DKIM and modify headers) I setup postfix on Debian and I guess this system is still running. Quickly after that I explored NGINX as a reverse proxy for yet again shitty Windows IIS webservers. This was my entry to open source and Linux in general.
Oh it is not that much, I run adguard DNS with adblocking, searxng as my search engine, vaultwarden as my password manager. All combined with Argo CD as GitOps engine, nginx ingress with cert-manager for lets encrypt certificates, longhorn as storage layer and metallb as loadbalancer solution. I am planning to completely replace my current setup (which is an old sandy bridge powered HP microserver) with a turing pi 2 clusterboard with 4 RPi4 CMs as soon as they get cheaper.
I run k3s and all my stuff runs in it no need to deal with docker anymore.
You got a point with NVD but this case shows how one could damage the reputation of a product - this really looks like Bagder didnt care about security, even the 2020 prefix is a bad sign looking from the outside. I am not sure how the NVD define CVE scores but as bagder openly explains this isnt a flaw in security, just a bug he already fixed years ago.
This looks awesome. Maybe I will adapt some things to my Arch install. This Distrobox thing looks great.
Way beyond that ;)
This is what I am talking about … Most countries in Europe just gives you kinda unlimited data plans… look at this crap
I rarely need mobile data because I work from home but if my landline has an interruption I can barely work 1 or 2 days with that if I tweak data consumption on my work laptop.
In Germany we pay lots of money for 5G data volume. For me I got 20 Gigs for about 40 bucks, this is mostly Not a thing in the rest of Europe. But data plans on landlines are really dumb.
I see no discrimination here lol. Look up licenses and stop dreaming.
It is. You mix free software and open source, their often but not always the same.
This is your choice of course.
Yes but is that affecting you businesswise, for example using terraform for proviosioning infrastructure for a customer? As far as I understand this move it affects companies like gruntwork who makes a business on top of terraform with terragrunt. Dont get me wrong, I do dislike this change also but saying „it is not open source anymore“ is just wrong. It is still open source but its usage changed for companies making a dollar here or there with technologies they dont develop.
Did you read the post from them? You are not affected.
This depends on your government I guess? In Germany the authority for passports is a private company (former state property and now again owned by the Federal Republic of Germany) - but indeed that sounds scary.
libremdb is a foss frontend for imdb
Not sure if paperless could fit your need https://github.com/paperless-ngx/paperless-ngx#features
I don’t but lots of people stick anyways to a single network with some kind of crappy router and from OPs post I assumed that OP doesn’t really care about security, see SELinux