Comment on Advice around setting up two laptops, one as server
admin@mastodon.futurelab.social 1 year ago@schmorpel It's about defense in depth. If you are running an application inside of a docker container, it's much more difficult for it to interact with or compromise other applications running in other containers or on the host system. So if I'm running a bookwyrm instance and a mastodon instance in separate containers, and there's a security flaw in bookwyrm that someone exploits, that doesn't mean they automatically get access to the mastodon stuff too.
admin@mastodon.futurelab.social 1 year ago
@schmorpel additionally, using containers allows for wrapping of dependencies. If I have one application that uses python 2.7 and another that uses python 3, installing both versions on the host system could cause conflicts. But containers have separated file systems, so they can each have their own dependencies without conflict. Mastodon runs a web service to serve http content, a database, various workers etc that can all run together on an separate network stack from other containers.