Comment on Rybbit - Open source Google Analytics replacement

• quick_snail@feddit.nl ⁨4⁩ ⁨weeks⁩ ago

  I think that has the same problems, no? Or does podman do signature verification on all the layers it downloads from the container repo?

  source

  • yessikg@fedia.io ⁨4⁩ ⁨weeks⁩ ago

    Podman runs rootless by default

    source

    • quick_snail@feddit.nl ⁨4⁩ ⁨weeks⁩ ago

      You didnt read what I wrote. The security problem is how it downloads layers. It doesn’t verify them.

      source

      • yessikg@fedia.io ⁨4⁩ ⁨weeks⁩ ago

        Ah, I don't know enough about that to give you an answer

        source