WolfLink@sh.itjust.works to linuxmemes@lemmy.world · 1 day agoEvery time I use podmansh.itjust.worksimagemessage-square171linkfedilinkarrow-up1491arrow-down135
arrow-up1456arrow-down1imageEvery time I use podmansh.itjust.worksWolfLink@sh.itjust.works to linuxmemes@lemmy.world · 1 day agomessage-square171linkfedilink
minus-squaredeathmetal27@lemmy.worldlinkfedilinkarrow-up27·20 hours agoThis is why I don’t like Docker compared to Podman:
minus-squarexavier666@lemmy.umucat.daylinkfedilinkEnglisharrow-up3·7 hours agoI may be dumb but I apply the firewall at the router level (OPNsense). That should be fine, right?
minus-squareNocturnalEngineer@lemmy.worldlinkfedilinkarrow-up5·4 hours agoSecurity should be layered. Ideally both network & server-based firewalls should be enabled.
minus-squareWolfLink@sh.itjust.worksOPlinkfedilinkarrow-up11·20 hours agoI literally yesterday dealt with that. There’s an option to just turn off Docker’s firewall manipulation so you can do it manually.
minus-squareRamenator@lemmy.worldlinkfedilinkarrow-up3·16 hours agoI had the same issue, but I just added my plain iptables rules to the DOCKER-USER table, which worked fine
minus-squareWolfLink@sh.itjust.worksOPlinkfedilinkarrow-up2·15 hours agohttps://docs.docker.com/engine/network/packet-filtering-firewalls/#prevent-docker-from-manipulating-firewall-rules Basically put: { iptables: False, Ip6tables: False } In /etc/docker/daemon.json
This is why I don’t like Docker compared to Podman:
I may be dumb but I apply the firewall at the router level (OPNsense). That should be fine, right?
Security should be layered. Ideally both network & server-based firewalls should be enabled.
I literally yesterday dealt with that. There’s an option to just turn off Docker’s firewall manipulation so you can do it manually.
I had the same issue, but I just added my plain iptables rules to the DOCKER-USER table, which worked fine
Please elaborate…
https://docs.docker.com/engine/network/packet-filtering-firewalls/#prevent-docker-from-manipulating-firewall-rules
Basically put:
{ iptables: False, Ip6tables: False }In /etc/docker/daemon.json