| Post Reply | RetroFed Forums Forum Index » Podman |
| Author | Message | ||
|---|---|---|---|
|
mel ♀
jlai.lu
mat@jlai.lu Joined: 2023-07-10 |
Cross-posted from "Dedicated service user or not ?" by @mat@jlai.lu in !selfhosted@lemmy.world Hi all ! As of today, I am running my services with rootless podman pods and containers. Each functional stack gets its dedicated user (user cloud runs a pod with nextcloud-fpm, nginx, postgresql...) with user mapping. Now, my thought were that if an attack can escape a container, it should be contained to a specific user. Is it really meaningful ? With service users' home setup in /var/lib, it makes a lot of small stuff annoying and I wonder if the current setup is really worth it ? |
||
| 1 Original | |||
| Post Reply |
Back to top |