comment on Replacement for Docker Content Trust (DCT) in c/sysadmin@reddthat.com
[–] 1 point 2 months ago

I've used cve layer scanners before (I forget which one my org used), which wasn't perfect and actually caused issues. Sometimes a base layer had a cve (that would be patched by the next "Docker layer") and it would still be flagged.

Pulling the Dockerfile of the oss products when we could, and then hosting the images ourselves on S3/minio/artifactory etc. Even to the point of building our own Alpine base image and then building on-top.

I'd love to know what others do too!

  • permalink
  • fedilink
  • source
    •
    comment on Hackers shoveled snow for company, were rewarded with network admin access in c/sysadmin@reddthat.com
    comment on Server virtualization market heats up as VMware rivals try to create alluring alternatives in c/sysadmin@reddthat.com
    [–] 1 point 11 months ago

    I've had several vps servers for years and years. One I pay for and one is free on AWS. I just signed up for a single cpu server that is $17 per year. That is much cheaper than the one I pay for. Web server and mail server and some other stuff.

  • permalink
  • fedilink
  • source
    •
    comment on Oops. VMware admits it over-specced storage servers for years in c/sysadmin@reddthat.com