singularity
ufw-docker
singularity | ufw-docker | |
---|---|---|
3 | 65 | |
665 | 3,774 | |
2.3% | - | |
9.8 | 0.0 | |
7 days ago | about 1 year ago | |
Go | Shell | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
singularity
- is singularity-ce with centos 7 kernel 3.10.el7.x86
-
Docker containers usually still reachable even if bound to 127.0.0.1
rkt (and many other container solutions) was introduced after docker was released and became popular... they even mentioned docker's shortcomings as a motivation for the project creation [0]. It had all the same problems as other replacement software: there were plenty of bugs and missing features, documentation was limited, and there are no community to help you (the announcement explicitly mentions "prototype quality release"). None of those would be fatal if it was significantly better than docker, but it was not -- it was basically the same functionality. So almost no one made the switch. It is closed now [1]
And why "rkt"? There were much better alternative container runtimes. For example Sylabs Singularity [2] -- container-as-a-file, instant mounting, etc... I wish more people knew about it.
[0] https://web.archive.org/web/20141201181834/https://coreos.co...
[1] https://github.com/rkt/rkt#warning-end-of-project-warning
[2] https://github.com/sylabs/singularity#singularityce
-
ELI5: Why does the FreeBSD community hate Docker and Kubernetes so much?
Docker (and the current generation of OCI runtimes) is rather shitty at host OS isolation too. It may have started well, but over time more capabilities were added for the convenience of developers and at the cost of maintainers. I would personally love if the ecosystem were to shift to more isolated workloads with better HPC support. Singualrity looks promising but still maintains OCI compatibility.
ufw-docker
-
Swag reverse proxy, fail2ban not working
I am running ubuntu server 22.04 LTS and have fail2ban running on the host. This works great, no issues and IPs get banned for the rules I have in place. I am using UFW and have updated my after.rules for docker based on the recommendations here.
-
How to close Docker ports
I use this without problems for Long time, https://github.com/chaifeng/ufw-docker
-
Docker Overrules UFW
[2016]
A solution is known and formed detailed here: https://github.com/chaifeng/ufw-docker
- DHCP is not blocked by ufw/iptables
-
Docker networking seems to have completely broken, can't really explain it all in the title.
In any case, maybe try to compare the blocked port ranges with the ports you are using. Did you see this https://github.com/chaifeng/ufw-docker
-
Ongoing attacks on Synology NAS: how to protect your NAS
https://github.com/chaifeng/ufw-docker For example.
-
Security on ubuntu
ufw is nice, when you are on public networks. And very nice if you are playing with SSH-Server, Docker,.. on your notebook. Couse you write coding, I want to add this, if you use docker.
-
Securing a VPS running docker
You can use use this for a more manual approach: https://github.com/chaifeng/ufw-docker
-
Gluetun/QBitTorrent Web UI issues
Sorry that's about the extent of my docker network knowledge. One other thing you can check though - are you running ufw on the host? If so you can try updating the config with ufw-docker.
-
What OS for NUC with Plex, Arrs, Home Assistant & Frigate
Hi! I'm also new to the homelab category, but I have a bit of experience. I'm currently running Ubuntu 22.04, and the only problem what I had is docker containers not working with ufw. (Fix can be found here: https://github.com/chaifeng/ufw-docker) I've been running my stuff in Docker containers, and it worked pretty well for me. So if you are also new to this, I'd definetly recommend Ubuntu for its simplicity. (Also tons of already great tutorials on how to do literally anything)
What are some alternatives?
apptainer - Apptainer: Application containers for Linux
Nginx Proxy Manager - Docker container for managing Nginx proxy hosts with a simple, powerful interface
singularity-cri - The Singularity implementation of the Kubernetes Container Runtime Interface
podman - Podman: A tool for managing OCI containers and pods.
singularity - Singularity has been renamed to Apptainer as part of us moving the project to the Linux Foundation. This repo has been persisted as a snapshot right before the changes.
ansible-role-firewall - Ansible Role - iptables Firewall configuration.
warewulf - Warewulf is a stateless and diskless container operating system provisioning system for large clusters of bare metal and/or virtual systems.
csf-post-docker - CSF with support for Docker
img - Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
firehol - A firewall for humans...
rkt
tailscale - The easiest, most secure way to use WireGuard and 2FA.