Lockdown your Dockerized build environments --- Because privileged mode is insecure, you should restrict your CI/CD environments to known users and projects. If this isn't feasible, then instead of using Docker, you could try using a standalone image builder like Buildah to eliminate the risk. Alternatively, configuring rootless Docker-in-Docker can mitigate some --- but not all --- of the security concerns... - Source: dev.to / 23 days ago

In my experience, not using docker to build docker images is a good idea. E.g. buildah[0] with chroot isolation can build images in a GitLab pipeline, where docker would fail. It can still use the same Dockerfile though. If you want to get rid of your Dockerfiles anyway, nix can also build docker images[1] with all the added benefits of nix (reproducibility, efficient building and caching, automatic layering,... - Source: Hacker News / 7 months ago

Buildah: This lightweight, open-source command-line tool for building and managing container images. It is an efficient alternative to Docker. With Buildah, you can build images in various ways, including using a Dockerfile, a podmanfile or by running commands in a container. Buildah is a flexible, secure and powerful tool for building container images. - Source: dev.to / about 1 year ago

When I saw the title I thought it was going to be about `buildah` [1][2] Which allows you to create images using the command line to build them up step-by-step. [1] https://buildah.io/. - Source: Hacker News / over 1 year ago

Buildah is a "tool that facilitates building OCI images" of Containers. If it is not installed, podman system migrate will print out the warning:. - Source: dev.to / over 1 year ago

The only way I can foresee a cryptocoin actually holding value is if spending the coin meant spending processing cycles and RAM doing things like this: https://en.wikipedia.org/wiki/List_of_volunteer_computing_projects But in more general sense, less like https://boinc.berkeley.edu/ and more like AWS... It's the only way to have value, actually holding computing power in a distributed network. - Source: Hacker News / about 2 months ago

Or alternatively: Boinc[1], which has a bunch of different projects. [1] https://boinc.berkeley.edu/. - Source: Hacker News / 3 months ago

Made me think of Gridcoin and BOINC https://boinc.berkeley.edu/. - Source: Hacker News / 5 months ago

The BOINC Census is back for another year! BOINC is an open source software and network for volunteer computing. People can use it do donate their CPU/GPU power to various scientific research areas like cancer, drug discovery, mapping the galaxy, and more. Source: 7 months ago

A few years back, I was in a similar situation and found BOINC(https://boinc.berkeley.edu/) to be a great way to contribute. It's a platform that lets you support various scientific research projects by sharing your computational power and bandwidth. However, it's worth noting that BOINC might tends to be more CPU/GPU intensive rather than bandwidth-heavy. - Source: Hacker News / 7 months ago