My wife has one. She gets weird looks in the office since we only have one. Both of us have bikes, she also has a motorbike. Always the right tool for the job.
ttk
joined 2 years ago
Not really. The other one.
There's a german stoner movie called Lammbock which covers exactly this scenario. Check it out if you can.
But it's the stuff which is used in nuclear power plants to store the used rods.
Indeed. Sure, they have these features, but only if used correctly while introducing vast more complexity (especially when being executed in a k8s environment,but also executed in plain docker). But, you know what also has security when used correctly? Plain linux.
What about 90% of all images on docker hub executing their main payload as root? What about many images bundling unnecessary software like an init system? What about the fact that even if you rm something in a dockerfile, it is still present, if you execute the rm in a different RUN command? What about every user in the docker group being implicit root on the host since they simply can mount the host's / inside their container? What about the reusing of layers between images like it is even intended?
Doesnt sound like a security tool, does it? Sure, it feels a bit like one, but it was never intended to be one, but a dependency and environment bundling tool which happens to use certain linux APIs which can be used for security. But it wraps lots of abstraction around it.
If you want to use these features for security, access them manually. But, OP said they are kind of a noob. Telling them to just use containers is dangerous and leads to false assumptions.
Source: i work as a cloud/container/devops/k8s expert for over 5 years.
Two remarks:
- Containers are (and never were) no security instruments but only fancy ways of bundling things
- You can open up other ports to the internet if you know what you're doing. My SSH is open to the internet, but only with key based auto, and in case i need pw auth as a backup, only with 2FA enabled
Whole milk is just water with some emulgated fat in it. Fresh squeezed juice is just water with some biomass in it.
I suppose we need to switch to sunflower oil or something. It is digestible, has no water in it, but isnt exactly healthy.
I'd say Coke Zero, but technically this is just a "water with some chemicals in it" goof, and therefore not allowed.
This is the way
I mostly know what they do for a living. I am not really sure how old they are or what are their birthdays. But it simply isnt relevant.
I had my bachelor's party weekend last weekend, and my best man rented an airbnb. We were 9 guys and some of them did not know each other before. Doesnt matter, we had beer and a great time. I think, such details really dont matter, if not for small talk.