Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Portainer – A lightweight management UI for Docker

portainer.io

Post reply on HN
Print view View original

51–53 of 53 posts

Re: Show HN: Portainer – A lightweight management UI for Docker

#51

Post by deviantony »

falcolas wrote: post #26
deviantony wrote: post #2

Main developer here, feel free to ask any questions :)

So, here's a concern for you: this provides for a severe security hole, since it has the ability to effectively run as root on any machine its connected to (a'la privileged mode, volumes, network, leaking secrets through environment variables). It might be worthwhile to find a way to mitigate that security hole, or add some serious access control restrictions. I wouldn't be too surprised if your test cluster machines…

Thanks for the feedback ! We will indeed investigate any potential security holes. We're also working on AC restrictions at the moment.

Re: Show HN: Portainer – A lightweight management UI for Docker

#52

Post by progx »

IanCal wrote: post #20
progx wrote: post #11

Nice UI. But my mainproblem is not solved with an UI. I did not understand who uses only default containers without configuration or only the small possible container configurations? For such people a default UI is perfect. E.g. Containers with Linked Data-Containers to store the Data outside of a container, or setting up a container with different parameters (company/server specific). For such things i need an extra…

> E.g. Containers with Linked Data-Containers to store the Data outside of a container, or setting up a container with different parameters (company/server specific). For such things i need an extra system which can not be used with your or any other UI. What ways are you injecting new data in? This service appears to support environment variables (which sounds right for setting up a container with different paramete…

The ENV vars for a container are part of the standard docker system, they work as expected and are supported by many UIs.

I mean how dynamic data come into the Container from the UI, when you setup a new container? I use the data to setup the container, get letsencrypt certificates, update nginx proxy, add to backups, ....

Example: I setup a new Apache+PHP-Container with Domain xyz.com, now i want to add a subdomain abc.xyz.com. How can i do that with the UI and automatically inform my other components about the changes. That is what i mean with, that the UI solve not this problem for me and it has no API to connect. Or their template system is not flexible enough to handle such things.

Currently my data is stored in conf files and i use some custom scripts to create / update the docker containers, update proxy, ....

Post reply on HN