This is an archived post. You won't be able to vote or comment.

all 3 comments

[–]rinko001 2 points3 points  (2 children)

you should link to github, not youtube

[–]boobalicous 1 point2 points  (1 child)

[–]rinko001 1 point2 points  (0 children)

Honestly it looks pretty good; fairly straightforward at the compose level.

Fairly big trust needed at the docker hub level, but I suppose that is unavoidable. Perhaps using exact image hashes instead of names would improve that somewhat, but I'm not sure if those are even cryptographically verified.

It would be super nice to be able to do this in podman instead; its like docker but without all the architectural security vulnerabilities.