Comment on Rybbit - Open source Google Analytics replacement
quick_snail@feddit.nl 2 days agoI think that has the same problems, no? Or does podman do signature verification on all the layers it downloads from the container repo?
Comment on Rybbit - Open source Google Analytics replacement
quick_snail@feddit.nl 2 days agoI think that has the same problems, no? Or does podman do signature verification on all the layers it downloads from the container repo?
yessikg@fedia.io 1 day ago
Podman runs rootless by default
quick_snail@feddit.nl 1 day ago
You didnt read what I wrote. The security problem is how it downloads layers. It doesn’t verify them.
yessikg@fedia.io 1 day ago
Ah, I don't know enough about that to give you an answer