I like steering docker runs with docker-compose, especially with .env files - ea... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		subscribed 22 days ago \| parent \| context \| favorite \| on: I got hacked: My Hetzner server started mining Mon... I like steering docker runs with docker-compose, especially with .env files - easy to store in repositories, easy to customise and have sane defaults.

flowerthoughts 22 days ago [–]

Yeah agreed. I use docker-compose. But it doesn't help if the Docker images try to update /etc/passwd, or force a hardcoded UID, or run some install.sh at runtime instead of buildtime.

subscribed 15 days ago | [–]

Oh, absolutely. Some things some images try to do are just silly.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact