Tag: containers

Why Sonarr, qBittorrent and Jellyfin fight over bind-mounted files, how PUID/PGID works in the image, when Docker's user: fits better, and how to share media.

A triage runbook for a Docker or Kubernetes container stuck in a restart loop: read the signals, stop the loop, get a shell, and find the real cause fast.

Rootless Podman Quadlets or rootless Docker for a home lab host? Networking, cgroups, auto-updates, bind mounts and boot behavior compared, with a clear pick.

Turn on read_only: true and watch nginx, Postgres, Redis, Python and Node fail in specific ways. Real errors, plus the minimum tmpfs and volume set for each.

Turn a devcontainer into a team standard: Compose with Postgres, pinned Features, lifecycle hooks, one prebuilt image for laptops and CI, and the UID gotcha.

Letting a coding agent run npm install and arbitrary shell? Compare gVisor, Firecracker, and Kata on startup, KVM needs, Docker fit, and network egress.

Rebuild Docker's bridge network with ip netns, veth pairs, a Linux bridge and nftables NAT. Six iproute2 commands, three nft rules, and a 2 AM debugging edge.

Self-hosted GitHub Actions, Forgejo, and GitLab runners can hand a forked pull request root on your box. Here is the isolation ladder that actually stops it.

One host, 20 Unix users, 20 rootless Docker daemons. The isolation model that beats a single shared daemon, plus the trade-offs nobody tells you about.

Devcontainers work without VS Code. DevPod gives you the same devcontainer.json from neovim, tmux, or any editor, and here is when it is overkill.

TrueNAS Scale ditched Kubernetes for native Docker. Apps catalog vs raw Compose, when each wins, dataset snapshots, and why custom apps took so long.

Daemonless OCI image builds in CI without Docker-in-Docker risks. Kaniko vs Buildah compared, when each fits, and which one suits your pipeline.