Damus
Open in Damus

Recent Notes

Tomáš Janoušek · 26w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqtdjuq430ahd9mddh0n7ms7ea0a6q7dx4x6yntz0yz9hj4x0cs92qaflw53 also I've heard that in this setup docker container ports might be exposed to the inte...
 Petr Tesařík profile picture
Petr Tesařík @Petr Tesařík
@Tomáš Janoušek By now, docker has left my system and will never make a comeback. But why did nobody warn me before I broke my system?

Besides, why didn't the #opensuse docker package revert those changes to iptables at unistall time?
1
Tomáš Janoušek · 26w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqtdjuq430ahd9mddh0n7ms7ea0a6q7dx4x6yntz0yz9hj4x0cs92qaflw53 oh actually more vaguely remembering time - there's iptables the original and iptables-via-nftables shim I have no idea which of these is better, but fairly certain the behaviour is di...
Petr Tesařík profile picture
If your firewall starts behaving strangely after installing #docker on #opensuse #slowroll, the reason is that firewalld has switched to nft, but docker still uses iptables. You may have to install iptables (the CLI tool) to fix the damage.
1
Tomáš Janoušek · 26w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqtdjuq430ahd9mddh0n7ms7ea0a6q7dx4x6yntz0yz9hj4x0cs92qaflw53 also I've heard that in this setup docker container ports might be exposed to the internet despite whatever firewalld config because the two interact a bit weird better double check, o...
DougMerritt (log😅 = 💧log😄) · 37w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqtdjuq430ahd9mddh0n7ms7ea0a6q7dx4x6yntz0yz9hj4x0cs92qaflw53 > finds my idea good There's a first time for everything! 😆 But seriously, that's how the world should work, isn't it.
Petr Tesařík profile picture
I've just had a dinner conversation with my eldest son, and he discovered that we do our jobs all backwards. In principle, we take a variable X (some existing kernel code), apply function f (a benchmark) to arrive at some result Y (performance metric). But it would be much more useful to have the inverse function f' which takes the desired performance Y and returns the corresponding code X (or produces a proof that no such code exists). Genius! 😂