Lockdown your Dockerized build environments --- Because privileged mode is insecure, you should restrict your CI/CD environments to known users and projects. If this isn't feasible, then instead of using Docker, you could try using a standalone image builder like Buildah to eliminate the risk. Alternatively, configuring rootless Docker-in-Docker can mitigate some --- but not all --- of the security concerns... - Source: dev.to / about 1 month ago

In my experience, not using docker to build docker images is a good idea. E.g. buildah[0] with chroot isolation can build images in a GitLab pipeline, where docker would fail. It can still use the same Dockerfile though. If you want to get rid of your Dockerfiles anyway, nix can also build docker images[1] with all the added benefits of nix (reproducibility, efficient building and caching, automatic layering,... - Source: Hacker News / 8 months ago

Buildah: This lightweight, open-source command-line tool for building and managing container images. It is an efficient alternative to Docker. With Buildah, you can build images in various ways, including using a Dockerfile, a podmanfile or by running commands in a container. Buildah is a flexible, secure and powerful tool for building container images. - Source: dev.to / about 1 year ago

When I saw the title I thought it was going to be about `buildah` [1][2] Which allows you to create images using the command line to build them up step-by-step. [1] https://buildah.io/. - Source: Hacker News / over 1 year ago

Buildah is a "tool that facilitates building OCI images" of Containers. If it is not installed, podman system migrate will print out the warning:. - Source: dev.to / over 1 year ago

- Product - https://senja.io. Targeting saas founders and customers. - Primary acquisition channels - Social (twitter, LinkedIn, indie hackers), Word of Mouth and Search We salvaged the product hunt launch by doing these things - My cofounder and I have posted on Twitter, Linkedin, Facebook, Slack, Indie Hackers etc. - We DMd hundreds of people. - We've sent an email to our list of over 1100 people asking for... Source: 12 months ago

This looks 🔥. This is for senja.io I guess? (just guessing you from username 🙂). Source: about 1 year ago

A message from a senja.io customer asking if there have been any updates on their questions. Source: about 1 year ago

After over a year of Indie hacking, we've finally hit my first Indie Hacking goal for senja.io... $5K MRR 🥳. Source: about 1 year ago

If you would like to try the free tool please visit senja.io - I hope this is within the rules. Source: over 1 year ago