A story about a crypto-miner, a sketchy API wrapper, and the creation of Dockerwall: a zero-trust outbound firewall for Docker.

(First blog post ever, would appreciate your input!)

Edit: Title was a lil clickbaity

  • potatoguy@mbin.potato-guy.space
    5·
    16 hours ago

    Also, an interesting thing is using systemd-resolved for DNS-over-TLS or hosts blocking.

    I configure it to my nextdns account and podman uses it for all requests, so I can block dns records from anywhere and use some tracking, mining, NSA, minimum domain age, etc, blocklists.