• 2 Posts
  • 25 Comments
Joined 1 month ago
cake
Cake day: September 12th, 2026

help-circle














  • You can run rootless Podman with Portainer, I do too. Or used to, before ditching Portainer.

    Can you elaborate on the ways a home lab is less secure if it runs a container management GUI? I’m open to learning more about it. What additional permissions does a GUI inherently require?

    Most companies I worked at used OpenShift in production, and I do not think it was considered an attack vector more than any other components of the ecosystem were. I would be surprised if this was a major factor when it came to security incidents.

    I don’t think that container privilege escalation vulnerabilities are correlated to the use of a GUI. To me, it is not a significant (or otherwise unique) risk. Even less so when we’re talking about a home lab that is only accessible via a VPN.

    Now, is it unnecessary? Sure, but then so is running Jellyfin or lighting a scented candle.






  • In my experience, setting frequent alarms can help with time-blindess. Having an alarm or a pop-up go off every 20-30 minutes won’t ensure you’re focused on the right task, but it will build more awareness to the amount of time that has passed since you’ve been off-track/distracted/going on random rabbit holes.