Omarchy: Any User Process Can Escalate to Root
1–10 of 583 posts
Re: Omarchy: Any User Process Can Escalate to Root
#2Why not use rootless podman? It is 2026 not 2016, Podman works much better than Docker today.
Re: Omarchy: Any User Process Can Escalate to Root
#3[flagged]
Re: Omarchy: Any User Process Can Escalate to Root
#4Why not use rootless podman? It is 2026 not 2016, Podman works much better than Docker today.
that's what I do and what the author recommends as well
Re: Omarchy: Any User Process Can Escalate to Root
#5This is the type of security and vulnerability testing that actually matters. In a sea of security researcher noise, thank you for contributing in a meaningful way.
Re: Omarchy: Any User Process Can Escalate to Root
#6Why not use rootless podman? It is 2026 not 2016, Podman works much better than Docker today.
that's what I do and what the author recommends as well
Somehow I doubt DHH and company would be OK sacrificing ""developer experience"" for security... There is still a non-trivial amount of docker-compose files and Docker incantations that don't work 1:1 with podman and podman-compose. Adjusting them would require Omarchy's users underatanding podman, and I doubt this will align with the opinionated nature of Omarchy..
Re: Omarchy: Any User Process Can Escalate to Root
#7Earlier quoted context omitted.
that's what I do and what the author recommends as well
Somehow I doubt DHH and company would be OK sacrificing ""developer experience"" for security... There is still a non-trivial amount of docker-compose files and Docker incantations that don't work 1:1 with podman and podman-compose. Adjusting them would require Omarchy's users underatanding podman, and I doubt this will align with the opinionated nature of Omarchy..
Come on. I am sure you don’t like DHH. But he’s always taken security seriously in Rails.
Re: Omarchy: Any User Process Can Escalate to Root
#8Earlier quoted context omitted.
that's what I do and what the author recommends as well
Somehow I doubt DHH and company would be OK sacrificing ""developer experience"" for security... There is still a non-trivial amount of docker-compose files and Docker incantations that don't work 1:1 with podman and podman-compose. Adjusting them would require Omarchy's users underatanding podman, and I doubt this will align with the opinionated nature of Omarchy..
[deleted]
Re: Omarchy: Any User Process Can Escalate to Root
#9Lol. This misconfiguration is so common and so trivial that LLMs have been known to exploit it unprompted, to complete their task.
Re: Omarchy: Any User Process Can Escalate to Root
#10Is it not better to run a VM just for Docker, like we have to do on macOS?