SNAP方式安装的Docker,使用上太过于强调安全,失去了很多linux系统开放性的灵活

来自snap官方对于其Docker安装包使用的部分解释

Docker container runtime
Build and run container images with Docker.
Usage
This build can only access files in the home directory. So Dockerfiles and all other files used in commands like docker build, docker save and docker load need to be in $HOME.
You can change the configuration of this build by modifying the files in /var/snap/docker/current/.
Additional certificates used by the Docker daemon to authenticate with registries need to be added in /var/snap/docker/current/etc/docker/certs.d (instead of /etc/docker/certs.d). This directory can be accessed by other snaps using the docker-registry-certificates content interface.

可以看出snap是使用了沙盒,或者说容器的技术,更或者说是一种思想。

但在实际使用的时候,尤其是用Docker装mysql是,如果使用者想用-v 挂载映射数据目录时就烦难了。沙河技术虽有安全性的保障,但控制权应交个用户,至少对高级用户提供一个方式可循就行。

Related Posts

推进一个非常好用的NAS应用服务NextCloud

假设您已经安装了linux和docker(建议不要sn…

发表回复

您的邮箱地址不会被公开。 必填项已用 * 标注