Comment on Rybbit - Open source Google Analytics replacement
quick_snail@feddit.nl 4 weeks agoI think that has the same problems, no? Or does podman do signature verification on all the layers it downloads from the container repo?
Comment on Rybbit - Open source Google Analytics replacement
quick_snail@feddit.nl 4 weeks agoI think that has the same problems, no? Or does podman do signature verification on all the layers it downloads from the container repo?
yessikg@fedia.io 4 weeks ago
Podman runs rootless by default
quick_snail@feddit.nl 4 weeks ago
You didnt read what I wrote. The security problem is how it downloads layers. It doesn’t verify them.
yessikg@fedia.io 4 weeks ago
Ah, I don't know enough about that to give you an answer