VirtualTam's bookmarks

1. Docker and Kubernetes userland proxies, versus exposing wide port ranges 2020-01-24

   tags: linux/container, linux/container/docker, linux/container/kubernetes, network, network/tcp, network/udp, performance

   [ permalink ]

   Docker:

   • https://github.com/moby/moby/issues/9021
   • https://github.com/moby/moby/issues/11185
   • https://github.com/moby/moby/issues/11185#issuecomment-245983651
   • https://github.com/moby/moby/issues/19017
   • https://github.com/docker/for-mac/issues/2670#issuecomment-372365274

   Kubernetes:

   • https://github.com/kubernetes/kubernetes/issues/1802
   • https://github.com/kubernetes/kubernetes/issues/23864
   • https://github.com/kubernetes/kubernetes/issues/23864#issuecomment-387070644

   Disabling userland proxy:

   • https://github.com/moby/moby/issues/5618
   • https://github.com/moby/moby/issues/14856
   • https://github.com/moby/moby/issues/11185#issuecomment-129085898

   Threads:

   • https://stackoverflow.com/questions/28717464/docker-expose-all-ports-or-range-of-ports-from-7000-to-8000
   • https://www.percona.com/blog/2016/02/05/measuring-docker-cpu-network-overhead/
   • https://forums.docker.com/t/exposing-large-range-of-ports-is-not-viable/20127/5
2. Docker & UFW 2019-10-24

   tags: linux/container/docker, linux/iptables, network, security, ufw

   [ permalink ]

   • https://github.com/moby/moby#4737
   • https://github.com/docker/for-linux/issues/690
   • https://stackoverflow.com/questions/30383845/what-is-the-best-practice-of-docker-ufw-under-ubuntu
   • https://www.mkubaczyk.com/2017/09/05/force-docker-not-bypass-ufw-rules-ubuntu-16-04/
   • https://www.techrepublic.com/article/how-to-fix-the-docker-and-ufw-security-flaw/
   • https://www.linux.com/news/how-fix-docker-and-ufw-security-flaw/
   • https://svenv.nl/unixandlinux/dockerufw/
   • https://blog.viktorpetersson.com/2014/11/03/the-dangers-of-ufw-docker.html
   • https://news.ycombinator.com/item?id=27613217
3. ferm and docker playing together 2018-12-21

   tags: ferm, linux, linux/container/docker, linux/iptables, linux/kernel, network, network/firewall, security

   [ permalink ]

   • https://github.com/diefans/ferment
   • https://blog.urth.org/2018/06/01/making-docker-play-nice-with-ferm-firewalls-on-linux/
   • https://unrouted.io/2017/08/15/docker-firewall/
   • https://github.com/wikimedia/puppet/commit/74050c6233c8b5ae291d3d7f5131a587941c50ac
   • https://github.com/moby/moby/issues/12294#issuecomment-432921518
   • https://github.com/Jamesits/systemd-named-netns
4. Manage sensitive data with Docker secrets | Docker Documentation 2018-09-27

   tags: linux/container/docker, secret, security, security/authentication, security/password, security/token

   [ permalink ]

   • https://github.com/moby/moby/issues/13490
5. Docker - Allow COPY command's --chown to be dynamically populated via ENV or ARG · Issue #35018 2018-09-26

   tags: build, environment, linux/container/docker, variable

   [ permalink ]

   • https://stackoverflow.com/questions/51981904/cant-build-docker-multi-stage-image-using-arg-in-copy-instruction
   • https://github.com/moby/moby/issues/34129
6. Docker Who - The names of Docker 2018-09-04

   tags: culture, history, linux/container, linux/container/docker, science

   [ permalink ]

   • https://github.com/moby/moby/blob/master/pkg/namesgenerator/names-generator.go
7. Share Compose configurations between files and projects | Docker Documentation 2018-07-25

   tags: configuration, linux/container/docker, linux/container/docker-compose, programming/yaml

   [ permalink ]

   Extension with Compose format 3.4+:

   • https://github.com/moby/moby/issues/31101
   • https://github.com/docker/compose/issues/4315
   • https://github.com/docker/cli/pull/452
   • https://github.com/docker/compose/pull/5140
   • https://stackoverflow.com/questions/45279662/extend-service-in-docker-compose-3

   Inheritance through YAML anchors:

   • https://stackoverflow.com/questions/14184971/more-complex-inheritance-in-yaml
   • https://web.archive.org/web/20130213112648/http://blog.101ideas.cz/posts/dry-your-yaml-files.html
   • https://gist.github.com/bowsersenior/979804
8. Moby 2017-09-04

   tags: linux, linux/container, linux/container/docker, moby

   [ permalink ]

   • https://www.mirantis.com/blog/ok-i-give-up-is-docker-now-moby-and-what-is-linuxkit/
   • https://blog.docker.com/2017/04/introducing-the-moby-project/
   • https://github.com/moby/moby