From kde-community  Tue Dec 04 13:11:55 2018
From: Jonathan Riddell <jr () jriddell ! org>
Date: Tue, 04 Dec 2018 13:11:55 +0000
To: kde-community
Subject: Re: Discourse
Message-Id: <20181204131155.GH18847 () embra ! edinburghlinux ! co ! uk>
X-MARC-Message: https://marc.info/?l=kde-community&m=154392913428264


I asked Greg from Fedora who has led their change away from mailing lists onto Discourse.

<Riddell> gwmngilfen: over in KDE land the discussion about Discourse
continues with queries about whether running in a Docker is a good
idea (seems ideal to me but sysadmins disagree) and if there's any
security concerns
<Riddell> any insight?

<gwmngilfen> i'm largely with you

<gwmngilfen> it does make things very easy to manage with respect to
rebuilding the app if needed, and i'm not sure what your security
implications might be, assuming the box is appropriately secured (we
only open 443, 22, and 25 to recieve mail)

<gwmngilfen> also if discourse itself is compromised, does it not
follow that docker would be more secure, since you;d also have to
escape the container?

-*- gwmngilfen doesn't know that for certain but it seems logical