Monthly Archives: September 2019

Docker and issues with using minimal Fedora base images

It is recomended when creating docker images that minimal images be used. In the case of Fedora it is recomended that for smallest images the minimal image should be used and “microdnf” be used instead of the full blown “dnf” … Continue reading

Posted in Automation, Unix | Comments Off on Docker and issues with using minimal Fedora base images

Installing a F30 network install and recovery server

In these days of cloud images being launched at the push of a button, and customised via heat patterns or user configuration scripts, network install via pxe boot seems to have dropped out of the news. As most home users … Continue reading

Posted in Automation, Unix | Comments Off on Installing a F30 network install and recovery server

Docker container network isolation can be a pain.

I have been embarking on an exercise to migrate some of the smaller applications I use into Docker containers. This is the reverse of my prior more secure approach where I wanted 3rd part apps that may be insecure but … Continue reading

Posted in Unix | Comments Off on Docker container network isolation can be a pain.

Docker Isolation, and non-Isolation

Docker is not KVM, there are major security trade-offs with a container, The key ones are shown below. Processes are not isolated The processes that are run by containers run for all intents and purposes as processes on the Docker … Continue reading

Posted in Unix | Comments Off on Docker Isolation, and non-Isolation