• 155 Posts
  • 8.25K Comments
Joined 3 years ago
cake
Cake day: June 30th, 2023

help-circle







  • slazer2au@lemmy.worldtoSysadmin@lemmy.worldThoughts on operating philosophy?
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    2
    ·
    18 hours ago

    I see you are throwing security out the window by not running rootless containers via podman so when your application gets popped the attackers will have root access.

    We’re not a FANG company; we should just do what everybody does and call it a day.

    But everyone else is trying to be fang so you still need your hyperconverged infrastructure and geo redundant clusters.

    Debian is good, but the point of containers is to deal with applications and hosts like cattle not pets so your underlying OS doesn’t matter. With Debian specifically you are several major versions behind current releases so you are missing performance gains if you don’t add extra repos, with that said Debian will backport security patches.