Créer un compteSe connecter

Recherches récentes

Aucune recherche récente

Options de recherche

Disponible uniquement lorsque vous êtes connecté.
mastouille.fr est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Mastouille est une instance Mastodon durable, ouverte, et hébergée en France.

Administré par :

Statistiques du serveur :

594
comptes actifs

mastouille.fr: À proposAnnuaire des profilsPolitique de confidentialité

Mastodon: À proposTélécharger l’applicationRaccourcis clavierVoir le code sourcev4.3.4

#rootless

0 message0 participant0 message aujourd’hui
A répondu dans un fil de discussion
Public *
Marcus Rohrmoser 🌻

Hi @lproven,
nice! I'm using several #CGI​s #RFC3875 for personal (scaled to n=1) web applications - be it (ephemeral) #QRCode qr.mro.name, #GeoHash mro.name/g/u28br conversion, a #nodb guestbook codeberg.org/jugendhacktlab.qd, a personal #ActivityPub server @aSeppoToTry or the hacky video-office-hours reservation system mro.name/sprechstunde. Once there even was a #HaveIBeenPwnd proof of concept blog.mro.name/2022/08/pwned-di.
They're #rootless deployments running on #shared #hosting (except qrcodes and HaveIBeenPwnd).

qr.mro.nameQR Code Generator
Public
Ludovic Courtès

Instead of disabling unprivileged user namespaces plain and simple, Ubuntu since 24.04 restricts them with an AppArmor profile, which is known to be insufficient:
seclists.org/oss-sec/2025/q1/2

Yet, people writing code relying on unprivileged user namespaces have to deal with Ubuntu specifics where things don’t behave as documented. Latest example:
codeberg.org/guix/guix/issues/

How do folks deal with it?

seclists.orgoss-sec: Three bypasses of Ubuntu's unprivileged user namespace restrictions
#Linux#containers#rootless
Public *
natxolg

Bueno, ya he eliminado todas las entradas del DNS con subdominios y solo he dejado dos wildcard, uno para lo expuesto y otro para lo interno

Para lo expuesto lo paso por npm (no me gusta que no tenga waf o mas opciones de seguridad), y para lo interno traefik tirando de las labels de los contendores

Por el camino he borrado todos los tunnels de cloudflare.

Siguiente paso, crear todos los usuarios y montar contenedores por tematica en usuarios aislados

#selfhosted#rootless#podman
Public
Aral Balkan

A little tip if you’re running in a rootless container on an immutable OS (like Fedora Silverblue) and have a tool (say Helix Editor – command: hx) installed in your “user” account but want to do, e.g.,

sudo hx /etc/hostname

Which would result in:

sudo: hx: command not found

Instead do:

(Fish) > sudo (which hx) /etc/hostname
(Bash) > sudo `which hx` /etc/hostname

Enjoy! :)

#FedoraSilverblue#sudo#container
ExplorerFlux en direct
À propos