blog

Notes on running Docker on your own server

Longer pieces about the parts that are genuinely awkward: remote access, certificates, releases that do not drop requests, and who is allowed to talk to your Docker daemon.

Is exposing the Docker socket remotely safe?

Opening the Docker daemon to the network hands out root on the host. What port 2375 actually grants, why TLS on 2376 is not a fix on its own, and the SSH alternative.

Read