• 0 Posts
  • 43 Comments
Joined 2 years ago
cake
Cake day: August 3rd, 2023

help-circle








  • That’d be an unusual setup. If you have users deploying containers on your host – that you trust enough to run whatever containers, but don’t want to give them ssh to the host – you’d usually have some kind of frontend such as Portioner, where you can have container exec and such.

    Containerization is not virtualization. It’s very possible to break out of containers, especially if configured badly, or if there are any found exploits in the container engine or even the kernel. Containers are “good enough” for the majority of projects, but it has never been designed to be a truly hardened sandbox.

    Basically, if you’re running an OpenSSH server inside a container, it’s likely that you’ve gotten the wrong ideas about securing your environment, and thus some old libraries in an old Debian image is the least of your worries.





  • wtf I love Norway now? Sweden is at like 2%.

    But Norway’s Linux spiked up to almost 30% in July 2024 as well. So I don’t really trust these sites. My guess is that it’s due to Tesla’s web browser or something? Tesla is the most popular electric car brand in Norway: 77k Model Y and 50k Model 3 are registered, and the only model with higher numbers is the Nissan Leaf with 81k, but that’ll be taken over very shortly (so far in 2025, there have been over 11k Model Y registrations, with the next runner-up being the Toyota BZ4X with 4,6k)