• 1 Post
  • 22 Comments
Joined 1 year ago
cake
Cake day: June 23rd, 2023







  • iluminaetoSelfhosted@lemmy.worldRestart Docker Container Without root privilegesEnglish
    arrow-up
    3
    arrow-down
    0
    ·
    6 months ago
    edit-2
    6 months ago
    link
    fedilink

    You could write a script that just restarts your container, make sure unprivileged users cannot edit it, and do one of two things:

    1. make a sudoers entry for your unprivileged account to call just that script as a user in the docker group with sudo
    2. use setuid on the script to have it execute from the docker group even when executed by users




  • iluminaetoSelfhosted@lemmy.worldK3s+Wireguard(?)English
    arrow-up
    4
    arrow-down
    0
    ·
    7 months ago
    link
    fedilink

    K8s has a mild solution to chicken and egg situations for nodes - the nodes support ‘static manifests’ which can be pods they know how to bring up before ever connecting to the API server. So you could have your wireguard peer be brought up this way. Downside is while those static manifests show up in k8s APIs, they aren’t fully manageable since they are defined by files on disk.