Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I host Internet facing docker containers that support IPv6 with '--net=host'. For those who don't know, this allows to run a container with exactly the same characteristics as a normal process network wise.


Yes, that works.

I am not comfortable giving a container full control over the host network though. I have not looked into the security implications of it but I would expect it is dangerous for the host.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: