GET https://kbin.spritesserver.nl/u/@sudneo@lemmy.world/comments

Components

20 Twig Components
84 Render Count
170 ms Render Time
12.0 MiB Memory Usage

Components

Name Metadata Render Count Render Time
settings_row_switch
"App\Twig\Components\SettingsRowSwitchComponent"
components/_settings_row_switch.html.twig
15 1.98ms
date
"App\Twig\Components\DateComponent"
components/date.html.twig
7 1.28ms
entry_comment
"App\Twig\Components\EntryCommentComponent"
components/entry_comment.html.twig
6 153.70ms
user_inline
"App\Twig\Components\UserInlineComponent"
components/user_inline.html.twig
6 1.10ms
date_edited
"App\Twig\Components\DateEditedComponent"
components/date_edited.html.twig
6 0.57ms
magazine_inline
"App\Twig\Components\MagazineInlineComponent"
components/magazine_inline.html.twig
6 0.83ms
entry_inline
"App\Twig\Components\EntryInlineComponent"
components/entry_inline.html.twig
6 0.93ms
user_avatar
"App\Twig\Components\UserAvatarComponent"
components/user_avatar.html.twig
6 0.93ms
vote
"App\Twig\Components\VoteComponent"
components/vote.html.twig
6 5.68ms
boost
"App\Twig\Components\BoostComponent"
components/boost.html.twig
6 8.70ms
user_settings_row_switch
"App\Twig\Components\UserSettingsRowSwitchComponent"
components/_user_settings_row_switch.html.twig
4 0.64ms
settings_row_enum
"App\Twig\Components\SettingsRowEnumComponent"
components/_settings_row_enum.html.twig
2 0.36ms
user_actions
"App\Twig\Components\UserActionsComponent"
components/user_actions.html.twig
1 0.46ms
related_magazines
"App\Twig\Components\RelatedMagazinesComponent"
components/_cached.html.twig
1 1.94ms
active_users
"App\Twig\Components\ActiveUsersComponent"
components/_cached.html.twig
1 0.26ms
related_categories
"App\Twig\Components\RelatedCategoriesComponent"
components/_cached.html.twig
1 7.22ms
related_posts
"App\Twig\Components\RelatedPostsComponent"
components/_cached.html.twig
1 1.45ms
related_entries
"App\Twig\Components\RelatedEntriesComponent"
components/_cached.html.twig
1 1.26ms
support_us_block
"App\Twig\Components\SupportUsBlock"
components/_cached.html.twig
1 0.19ms
featured_magazines
"App\Twig\Components\FeaturedMagazinesComponent"
components/_cached.html.twig
1 0.75ms

Render calls

entry_comment App\Twig\Components\EntryCommentComponent 12.0 MiB 48.42 ms
Input props
[
  "comment" => App\Entity\EntryComment {#2079
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#1907
      +user: Proxies\__CG__\App\Entity\User {#2174 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-do-I-create-a-docker-container-with-custom-programs"
      +title: "How do I create a docker container with custom programs inside?"
      +url: null
      +body: """
        Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it to other docker containers (like gluetun does, for instance). I’d also like to implement a killswitch or something like that to prevent ip leakage. Is this something easy-medium hard or something very complex? I already have a script that installs and runs the client to enable vpn that should be run at startup, but I miss the “expose the network interface” and the “do not expose it if not connected” (this last part I think is pretty easy with a basic firewall configuration)\n
        \n
        any tips/something already done?  \n
        thanks in advance!\n
        \n
        EDIT: probably crazy idea, but would it be possible to do this in gluetun?
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 11
      +favouriteCount: 30
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1728784342 {#2178
        date: 2024-10-13 03:52:22.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#2010 …}
      +votes: Doctrine\ORM\PersistentCollection {#1990 …}
      +reports: Doctrine\ORM\PersistentCollection {#2004 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1349 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2352 …}
      +badges: Doctrine\ORM\PersistentCollection {#2495 …}
      +children: []
      -id: 33027
      -titleTs: "'contain':7 'creat':4 'custom':9 'docker':6 'insid':11 'program':10"
      -bodyTs: "'account':6 'advanc':153 'alreadi':98,149 'also':72 'basic':144 'client':41,56,107 'complex':96 'compos':20 'configur':35,146 'connect':133 'contain':21,50,64 'crazi':156 'creat':47 'd':43,71 'docker':19,49,63 'done':150 'easi':90,141 'easy-medium':89 'edit':154 'enabl':109 'expos':59,121,129 'firewal':145 'free':5,23 'give':27 'gluetun':66,167 'hard':92 'hello':1 'hide.me':8,55 'idea':157 'implement':75 'insid':57 'instal':103 'instanc':69 'interfac':124 'ip':84 'key':30 'killswitch':77 'last':135 'leakag':85 'like':11,44,65,73,80 'medium':91 'miss':119 'network':123 'offici':40,54 'openvpn':32 'part':136 'plan':24 'possibl':162 'pretti':140 'prevent':83 'probabl':155 'run':52,105,114 'script':101 'someth':79,88,94 'startup':116 'thank':151 'think':138 'tips/something':148 'tri':13 'use':15 'vpn':110 'wireguard':34 'would':10,159"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1706287054
      +visibility: "visible             "
      +apId: "https://lemmy.kde.social/post/722914"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706200654 {#2177
        date: 2024-01-25 17:37:34.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Each container, by default, runs in a separate network namespace. You can use docker CLI to create specific networks that can be shared with other containers, or use docker-compose for it. Technically, for processes outside containers you can still use the same network of that container by running the inside the network namespace of the ‘VPN’ container (for example running them with unshare). However, I wouldn’t recommend this, as containers are supposed to run mostly isolated workload and not for this kind of use-case. But yeah, technically it’s feasible."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1706207127 {#2062
      date: 2024-01-25 19:25:27.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@tubbadu@lemmy.kde.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2379 …}
    +nested: Doctrine\ORM\PersistentCollection {#2383 …}
    +votes: Doctrine\ORM\PersistentCollection {#1906 …}
    +reports: Doctrine\ORM\PersistentCollection {#1926 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2380 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1363 …}
    -id: 339958
    -bodyTs: "'case':89 'cli':15 'compos':31 'contain':2,26,38,48,59,73 'creat':17 'default':4 'docker':14,30 'docker-compos':29 'exampl':61 'feasibl':95 'howev':66 'insid':52 'isol':79 'kind':85 'most':78 'namespac':10,55 'network':9,19,45,54 'outsid':37 'process':36 'recommend':70 'run':5,50,62,77 'separ':8 'share':23 'specif':18 'still':41 'suppos':75 'technic':34,92 'unshar':65 'use':13,28,42,88 'use-cas':87 'vpn':58 'workload':80 'wouldn':68 'yeah':91"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7007733"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706207127 {#1908
      date: 2024-01-25 19:25:27.0 +01:00
    }
  }
  "showNested" => false
  "dateAsUrl" => true
  "showMagazineName" => true
  "showEntryTitle" => true
]
Attributes
[]
Component
App\Twig\Components\EntryCommentComponent {#2296
  +comment: App\Entity\EntryComment {#2079
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#1907
      +user: Proxies\__CG__\App\Entity\User {#2174 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-do-I-create-a-docker-container-with-custom-programs"
      +title: "How do I create a docker container with custom programs inside?"
      +url: null
      +body: """
        Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it to other docker containers (like gluetun does, for instance). I’d also like to implement a killswitch or something like that to prevent ip leakage. Is this something easy-medium hard or something very complex? I already have a script that installs and runs the client to enable vpn that should be run at startup, but I miss the “expose the network interface” and the “do not expose it if not connected” (this last part I think is pretty easy with a basic firewall configuration)\n
        \n
        any tips/something already done?  \n
        thanks in advance!\n
        \n
        EDIT: probably crazy idea, but would it be possible to do this in gluetun?
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 11
      +favouriteCount: 30
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1728784342 {#2178
        date: 2024-10-13 03:52:22.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#2010 …}
      +votes: Doctrine\ORM\PersistentCollection {#1990 …}
      +reports: Doctrine\ORM\PersistentCollection {#2004 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1349 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2352 …}
      +badges: Doctrine\ORM\PersistentCollection {#2495 …}
      +children: []
      -id: 33027
      -titleTs: "'contain':7 'creat':4 'custom':9 'docker':6 'insid':11 'program':10"
      -bodyTs: "'account':6 'advanc':153 'alreadi':98,149 'also':72 'basic':144 'client':41,56,107 'complex':96 'compos':20 'configur':35,146 'connect':133 'contain':21,50,64 'crazi':156 'creat':47 'd':43,71 'docker':19,49,63 'done':150 'easi':90,141 'easy-medium':89 'edit':154 'enabl':109 'expos':59,121,129 'firewal':145 'free':5,23 'give':27 'gluetun':66,167 'hard':92 'hello':1 'hide.me':8,55 'idea':157 'implement':75 'insid':57 'instal':103 'instanc':69 'interfac':124 'ip':84 'key':30 'killswitch':77 'last':135 'leakag':85 'like':11,44,65,73,80 'medium':91 'miss':119 'network':123 'offici':40,54 'openvpn':32 'part':136 'plan':24 'possibl':162 'pretti':140 'prevent':83 'probabl':155 'run':52,105,114 'script':101 'someth':79,88,94 'startup':116 'thank':151 'think':138 'tips/something':148 'tri':13 'use':15 'vpn':110 'wireguard':34 'would':10,159"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1706287054
      +visibility: "visible             "
      +apId: "https://lemmy.kde.social/post/722914"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706200654 {#2177
        date: 2024-01-25 17:37:34.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Each container, by default, runs in a separate network namespace. You can use docker CLI to create specific networks that can be shared with other containers, or use docker-compose for it. Technically, for processes outside containers you can still use the same network of that container by running the inside the network namespace of the ‘VPN’ container (for example running them with unshare). However, I wouldn’t recommend this, as containers are supposed to run mostly isolated workload and not for this kind of use-case. But yeah, technically it’s feasible."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1706207127 {#2062
      date: 2024-01-25 19:25:27.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@tubbadu@lemmy.kde.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2379 …}
    +nested: Doctrine\ORM\PersistentCollection {#2383 …}
    +votes: Doctrine\ORM\PersistentCollection {#1906 …}
    +reports: Doctrine\ORM\PersistentCollection {#1926 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2380 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1363 …}
    -id: 339958
    -bodyTs: "'case':89 'cli':15 'compos':31 'contain':2,26,38,48,59,73 'creat':17 'default':4 'docker':14,30 'docker-compos':29 'exampl':61 'feasibl':95 'howev':66 'insid':52 'isol':79 'kind':85 'most':78 'namespac':10,55 'network':9,19,45,54 'outsid':37 'process':36 'recommend':70 'run':5,50,62,77 'separ':8 'share':23 'specif':18 'still':41 'suppos':75 'technic':34,92 'unshar':65 'use':13,28,42,88 'use-cas':87 'vpn':58 'workload':80 'wouldn':68 'yeah':91"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7007733"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706207127 {#1908
      date: 2024-01-25 19:25:27.0 +01:00
    }
  }
  +showMagazineName: true
  +showEntryTitle: true
  +showNested: false
  +level: 1
  +canSeeTrash: false
  +dateAsUrl: true
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
}
user_inline App\Twig\Components\UserInlineComponent 12.0 MiB 0.28 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "showAvatar" => false
]
Attributes
[]
Component
App\Twig\Components\UserInlineComponent {#2508
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +showAvatar: false
}
date App\Twig\Components\DateComponent 12.0 MiB 0.44 ms
Input props
[
  "date" => DateTimeImmutable @1706207127 {#1908
    date: 2024-01-25 19:25:27.0 +01:00
  }
]
Attributes
[]
Component
App\Twig\Components\DateComponent {#2661
  +date: DateTimeImmutable @1706207127 {#1908
    date: 2024-01-25 19:25:27.0 +01:00
  }
}
date_edited App\Twig\Components\DateEditedComponent 12.0 MiB 0.13 ms
Input props
[
  "createdAt" => DateTimeImmutable @1706207127 {#1908
    date: 2024-01-25 19:25:27.0 +01:00
  }
  "editedAt" => null
]
Attributes
[]
Component
App\Twig\Components\DateEditedComponent {#2725
  +createdAt: DateTimeImmutable @1706207127 {#1908
    date: 2024-01-25 19:25:27.0 +01:00
  }
  +editedAt: null
}
magazine_inline App\Twig\Components\MagazineInlineComponent 12.0 MiB 0.18 ms
Input props
[
  "magazine" => Proxies\__CG__\App\Entity\Magazine {#2384
    +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#2565
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
    +entries: Doctrine\ORM\PersistentCollection {#2589 …}
    +posts: Doctrine\ORM\PersistentCollection {#2592 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
    +bans: Doctrine\ORM\PersistentCollection {#2600 …}
    +reports: Doctrine\ORM\PersistentCollection {#2608 …}
    +badges: Doctrine\ORM\PersistentCollection {#2621 …}
    +logs: Doctrine\ORM\PersistentCollection {#2631 …}
    +awards: Doctrine\ORM\PersistentCollection {#2613 …}
    +categories: Doctrine\ORM\PersistentCollection {#2637 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#2566
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#2567
      date: 2023-11-02 13:51:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\MagazineInlineComponent {#2790
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
    +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#2565
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
    +entries: Doctrine\ORM\PersistentCollection {#2589 …}
    +posts: Doctrine\ORM\PersistentCollection {#2592 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
    +bans: Doctrine\ORM\PersistentCollection {#2600 …}
    +reports: Doctrine\ORM\PersistentCollection {#2608 …}
    +badges: Doctrine\ORM\PersistentCollection {#2621 …}
    +logs: Doctrine\ORM\PersistentCollection {#2631 …}
    +awards: Doctrine\ORM\PersistentCollection {#2613 …}
    +categories: Doctrine\ORM\PersistentCollection {#2637 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#2566
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#2567
      date: 2023-11-02 13:51:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showTitle: true
  +fullName: false
  +stretchedLink: false
  +showAvatar: false
}
entry_inline App\Twig\Components\EntryInlineComponent 12.0 MiB 0.22 ms
Input props
[
  "entry" => Proxies\__CG__\App\Entity\Entry {#1907
    +user: Proxies\__CG__\App\Entity\User {#2174 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
      +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#2565
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
      +entries: Doctrine\ORM\PersistentCollection {#2589 …}
      +posts: Doctrine\ORM\PersistentCollection {#2592 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
      +bans: Doctrine\ORM\PersistentCollection {#2600 …}
      +reports: Doctrine\ORM\PersistentCollection {#2608 …}
      +badges: Doctrine\ORM\PersistentCollection {#2621 …}
      +logs: Doctrine\ORM\PersistentCollection {#2631 …}
      +awards: Doctrine\ORM\PersistentCollection {#2613 …}
      +categories: Doctrine\ORM\PersistentCollection {#2637 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#2566
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#2567
        date: 2023-11-02 13:51:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
    +slug: "How-do-I-create-a-docker-container-with-custom-programs"
    +title: "How do I create a docker container with custom programs inside?"
    +url: null
    +body: """
      Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it to other docker containers (like gluetun does, for instance). I’d also like to implement a killswitch or something like that to prevent ip leakage. Is this something easy-medium hard or something very complex? I already have a script that installs and runs the client to enable vpn that should be run at startup, but I miss the “expose the network interface” and the “do not expose it if not connected” (this last part I think is pretty easy with a basic firewall configuration)\n
      \n
      any tips/something already done?  \n
      thanks in advance!\n
      \n
      EDIT: probably crazy idea, but would it be possible to do this in gluetun?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 11
    +favouriteCount: 30
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1728784342 {#2178
      date: 2024-10-13 03:52:22.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2010 …}
    +votes: Doctrine\ORM\PersistentCollection {#1990 …}
    +reports: Doctrine\ORM\PersistentCollection {#2004 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1349 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2352 …}
    +badges: Doctrine\ORM\PersistentCollection {#2495 …}
    +children: []
    -id: 33027
    -titleTs: "'contain':7 'creat':4 'custom':9 'docker':6 'insid':11 'program':10"
    -bodyTs: "'account':6 'advanc':153 'alreadi':98,149 'also':72 'basic':144 'client':41,56,107 'complex':96 'compos':20 'configur':35,146 'connect':133 'contain':21,50,64 'crazi':156 'creat':47 'd':43,71 'docker':19,49,63 'done':150 'easi':90,141 'easy-medium':89 'edit':154 'enabl':109 'expos':59,121,129 'firewal':145 'free':5,23 'give':27 'gluetun':66,167 'hard':92 'hello':1 'hide.me':8,55 'idea':157 'implement':75 'insid':57 'instal':103 'instanc':69 'interfac':124 'ip':84 'key':30 'killswitch':77 'last':135 'leakag':85 'like':11,44,65,73,80 'medium':91 'miss':119 'network':123 'offici':40,54 'openvpn':32 'part':136 'plan':24 'possibl':162 'pretti':140 'prevent':83 'probabl':155 'run':52,105,114 'script':101 'someth':79,88,94 'startup':116 'thank':151 'think':138 'tips/something':148 'tri':13 'use':15 'vpn':110 'wireguard':34 'would':10,159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706287054
    +visibility: "visible             "
    +apId: "https://lemmy.kde.social/post/722914"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706200654 {#2177
      date: 2024-01-25 17:37:34.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\EntryInlineComponent {#2853
  +entry: Proxies\__CG__\App\Entity\Entry {#1907
    +user: Proxies\__CG__\App\Entity\User {#2174 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
      +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#2565
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
      +entries: Doctrine\ORM\PersistentCollection {#2589 …}
      +posts: Doctrine\ORM\PersistentCollection {#2592 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
      +bans: Doctrine\ORM\PersistentCollection {#2600 …}
      +reports: Doctrine\ORM\PersistentCollection {#2608 …}
      +badges: Doctrine\ORM\PersistentCollection {#2621 …}
      +logs: Doctrine\ORM\PersistentCollection {#2631 …}
      +awards: Doctrine\ORM\PersistentCollection {#2613 …}
      +categories: Doctrine\ORM\PersistentCollection {#2637 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#2566
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#2567
        date: 2023-11-02 13:51:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
    +slug: "How-do-I-create-a-docker-container-with-custom-programs"
    +title: "How do I create a docker container with custom programs inside?"
    +url: null
    +body: """
      Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it to other docker containers (like gluetun does, for instance). I’d also like to implement a killswitch or something like that to prevent ip leakage. Is this something easy-medium hard or something very complex? I already have a script that installs and runs the client to enable vpn that should be run at startup, but I miss the “expose the network interface” and the “do not expose it if not connected” (this last part I think is pretty easy with a basic firewall configuration)\n
      \n
      any tips/something already done?  \n
      thanks in advance!\n
      \n
      EDIT: probably crazy idea, but would it be possible to do this in gluetun?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 11
    +favouriteCount: 30
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1728784342 {#2178
      date: 2024-10-13 03:52:22.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2010 …}
    +votes: Doctrine\ORM\PersistentCollection {#1990 …}
    +reports: Doctrine\ORM\PersistentCollection {#2004 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1349 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2352 …}
    +badges: Doctrine\ORM\PersistentCollection {#2495 …}
    +children: []
    -id: 33027
    -titleTs: "'contain':7 'creat':4 'custom':9 'docker':6 'insid':11 'program':10"
    -bodyTs: "'account':6 'advanc':153 'alreadi':98,149 'also':72 'basic':144 'client':41,56,107 'complex':96 'compos':20 'configur':35,146 'connect':133 'contain':21,50,64 'crazi':156 'creat':47 'd':43,71 'docker':19,49,63 'done':150 'easi':90,141 'easy-medium':89 'edit':154 'enabl':109 'expos':59,121,129 'firewal':145 'free':5,23 'give':27 'gluetun':66,167 'hard':92 'hello':1 'hide.me':8,55 'idea':157 'implement':75 'insid':57 'instal':103 'instanc':69 'interfac':124 'ip':84 'key':30 'killswitch':77 'last':135 'leakag':85 'like':11,44,65,73,80 'medium':91 'miss':119 'network':123 'offici':40,54 'openvpn':32 'part':136 'plan':24 'possibl':162 'pretti':140 'prevent':83 'probabl':155 'run':52,105,114 'script':101 'someth':79,88,94 'startup':116 'thank':151 'think':138 'tips/something':148 'tri':13 'use':15 'vpn':110 'wireguard':34 'would':10,159"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706287054
    +visibility: "visible             "
    +apId: "https://lemmy.kde.social/post/722914"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706200654 {#2177
      date: 2024-01-25 17:37:34.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
}
user_avatar App\Twig\Components\UserAvatarComponent 12.0 MiB 0.21 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "width" => 40
  "height" => 40
  "asLink" => true
]
Attributes
[]
Component
App\Twig\Components\UserAvatarComponent {#2916
  +width: 40
  +height: 40
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +asLink: true
}
vote App\Twig\Components\VoteComponent 12.0 MiB 3.72 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2079
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#1907
      +user: Proxies\__CG__\App\Entity\User {#2174 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-do-I-create-a-docker-container-with-custom-programs"
      +title: "How do I create a docker container with custom programs inside?"
      +url: null
      +body: """
        Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it to other docker containers (like gluetun does, for instance). I’d also like to implement a killswitch or something like that to prevent ip leakage. Is this something easy-medium hard or something very complex? I already have a script that installs and runs the client to enable vpn that should be run at startup, but I miss the “expose the network interface” and the “do not expose it if not connected” (this last part I think is pretty easy with a basic firewall configuration)\n
        \n
        any tips/something already done?  \n
        thanks in advance!\n
        \n
        EDIT: probably crazy idea, but would it be possible to do this in gluetun?
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 11
      +favouriteCount: 30
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1728784342 {#2178
        date: 2024-10-13 03:52:22.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#2010 …}
      +votes: Doctrine\ORM\PersistentCollection {#1990 …}
      +reports: Doctrine\ORM\PersistentCollection {#2004 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1349 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2352 …}
      +badges: Doctrine\ORM\PersistentCollection {#2495 …}
      +children: []
      -id: 33027
      -titleTs: "'contain':7 'creat':4 'custom':9 'docker':6 'insid':11 'program':10"
      -bodyTs: "'account':6 'advanc':153 'alreadi':98,149 'also':72 'basic':144 'client':41,56,107 'complex':96 'compos':20 'configur':35,146 'connect':133 'contain':21,50,64 'crazi':156 'creat':47 'd':43,71 'docker':19,49,63 'done':150 'easi':90,141 'easy-medium':89 'edit':154 'enabl':109 'expos':59,121,129 'firewal':145 'free':5,23 'give':27 'gluetun':66,167 'hard':92 'hello':1 'hide.me':8,55 'idea':157 'implement':75 'insid':57 'instal':103 'instanc':69 'interfac':124 'ip':84 'key':30 'killswitch':77 'last':135 'leakag':85 'like':11,44,65,73,80 'medium':91 'miss':119 'network':123 'offici':40,54 'openvpn':32 'part':136 'plan':24 'possibl':162 'pretti':140 'prevent':83 'probabl':155 'run':52,105,114 'script':101 'someth':79,88,94 'startup':116 'thank':151 'think':138 'tips/something':148 'tri':13 'use':15 'vpn':110 'wireguard':34 'would':10,159"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1706287054
      +visibility: "visible             "
      +apId: "https://lemmy.kde.social/post/722914"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706200654 {#2177
        date: 2024-01-25 17:37:34.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Each container, by default, runs in a separate network namespace. You can use docker CLI to create specific networks that can be shared with other containers, or use docker-compose for it. Technically, for processes outside containers you can still use the same network of that container by running the inside the network namespace of the ‘VPN’ container (for example running them with unshare). However, I wouldn’t recommend this, as containers are supposed to run mostly isolated workload and not for this kind of use-case. But yeah, technically it’s feasible."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1706207127 {#2062
      date: 2024-01-25 19:25:27.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@tubbadu@lemmy.kde.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2379 …}
    +nested: Doctrine\ORM\PersistentCollection {#2383 …}
    +votes: Doctrine\ORM\PersistentCollection {#1906 …}
    +reports: Doctrine\ORM\PersistentCollection {#1926 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2380 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1363 …}
    -id: 339958
    -bodyTs: "'case':89 'cli':15 'compos':31 'contain':2,26,38,48,59,73 'creat':17 'default':4 'docker':14,30 'docker-compos':29 'exampl':61 'feasibl':95 'howev':66 'insid':52 'isol':79 'kind':85 'most':78 'namespac':10,55 'network':9,19,45,54 'outsid':37 'process':36 'recommend':70 'run':5,50,62,77 'separ':8 'share':23 'specif':18 'still':41 'suppos':75 'technic':34,92 'unshar':65 'use':13,28,42,88 'use-cas':87 'vpn':58 'workload':80 'wouldn':68 'yeah':91"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7007733"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706207127 {#1908
      date: 2024-01-25 19:25:27.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\VoteComponent {#3009
  +subject: App\Entity\EntryComment {#2079
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#1907
      +user: Proxies\__CG__\App\Entity\User {#2174 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-do-I-create-a-docker-container-with-custom-programs"
      +title: "How do I create a docker container with custom programs inside?"
      +url: null
      +body: """
        Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it to other docker containers (like gluetun does, for instance). I’d also like to implement a killswitch or something like that to prevent ip leakage. Is this something easy-medium hard or something very complex? I already have a script that installs and runs the client to enable vpn that should be run at startup, but I miss the “expose the network interface” and the “do not expose it if not connected” (this last part I think is pretty easy with a basic firewall configuration)\n
        \n
        any tips/something already done?  \n
        thanks in advance!\n
        \n
        EDIT: probably crazy idea, but would it be possible to do this in gluetun?
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 11
      +favouriteCount: 30
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1728784342 {#2178
        date: 2024-10-13 03:52:22.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#2010 …}
      +votes: Doctrine\ORM\PersistentCollection {#1990 …}
      +reports: Doctrine\ORM\PersistentCollection {#2004 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1349 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2352 …}
      +badges: Doctrine\ORM\PersistentCollection {#2495 …}
      +children: []
      -id: 33027
      -titleTs: "'contain':7 'creat':4 'custom':9 'docker':6 'insid':11 'program':10"
      -bodyTs: "'account':6 'advanc':153 'alreadi':98,149 'also':72 'basic':144 'client':41,56,107 'complex':96 'compos':20 'configur':35,146 'connect':133 'contain':21,50,64 'crazi':156 'creat':47 'd':43,71 'docker':19,49,63 'done':150 'easi':90,141 'easy-medium':89 'edit':154 'enabl':109 'expos':59,121,129 'firewal':145 'free':5,23 'give':27 'gluetun':66,167 'hard':92 'hello':1 'hide.me':8,55 'idea':157 'implement':75 'insid':57 'instal':103 'instanc':69 'interfac':124 'ip':84 'key':30 'killswitch':77 'last':135 'leakag':85 'like':11,44,65,73,80 'medium':91 'miss':119 'network':123 'offici':40,54 'openvpn':32 'part':136 'plan':24 'possibl':162 'pretti':140 'prevent':83 'probabl':155 'run':52,105,114 'script':101 'someth':79,88,94 'startup':116 'thank':151 'think':138 'tips/something':148 'tri':13 'use':15 'vpn':110 'wireguard':34 'would':10,159"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1706287054
      +visibility: "visible             "
      +apId: "https://lemmy.kde.social/post/722914"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706200654 {#2177
        date: 2024-01-25 17:37:34.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Each container, by default, runs in a separate network namespace. You can use docker CLI to create specific networks that can be shared with other containers, or use docker-compose for it. Technically, for processes outside containers you can still use the same network of that container by running the inside the network namespace of the ‘VPN’ container (for example running them with unshare). However, I wouldn’t recommend this, as containers are supposed to run mostly isolated workload and not for this kind of use-case. But yeah, technically it’s feasible."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1706207127 {#2062
      date: 2024-01-25 19:25:27.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@tubbadu@lemmy.kde.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2379 …}
    +nested: Doctrine\ORM\PersistentCollection {#2383 …}
    +votes: Doctrine\ORM\PersistentCollection {#1906 …}
    +reports: Doctrine\ORM\PersistentCollection {#1926 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2380 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1363 …}
    -id: 339958
    -bodyTs: "'case':89 'cli':15 'compos':31 'contain':2,26,38,48,59,73 'creat':17 'default':4 'docker':14,30 'docker-compos':29 'exampl':61 'feasibl':95 'howev':66 'insid':52 'isol':79 'kind':85 'most':78 'namespac':10,55 'network':9,19,45,54 'outsid':37 'process':36 'recommend':70 'run':5,50,62,77 'separ':8 'share':23 'specif':18 'still':41 'suppos':75 'technic':34,92 'unshar':65 'use':13,28,42,88 'use-cas':87 'vpn':58 'workload':80 'wouldn':68 'yeah':91"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7007733"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706207127 {#1908
      date: 2024-01-25 19:25:27.0 +01:00
    }
  }
  +formDest: "entry_comment"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
boost App\Twig\Components\BoostComponent 12.0 MiB 1.12 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2079
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#1907
      +user: Proxies\__CG__\App\Entity\User {#2174 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-do-I-create-a-docker-container-with-custom-programs"
      +title: "How do I create a docker container with custom programs inside?"
      +url: null
      +body: """
        Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it to other docker containers (like gluetun does, for instance). I’d also like to implement a killswitch or something like that to prevent ip leakage. Is this something easy-medium hard or something very complex? I already have a script that installs and runs the client to enable vpn that should be run at startup, but I miss the “expose the network interface” and the “do not expose it if not connected” (this last part I think is pretty easy with a basic firewall configuration)\n
        \n
        any tips/something already done?  \n
        thanks in advance!\n
        \n
        EDIT: probably crazy idea, but would it be possible to do this in gluetun?
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 11
      +favouriteCount: 30
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1728784342 {#2178
        date: 2024-10-13 03:52:22.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#2010 …}
      +votes: Doctrine\ORM\PersistentCollection {#1990 …}
      +reports: Doctrine\ORM\PersistentCollection {#2004 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1349 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2352 …}
      +badges: Doctrine\ORM\PersistentCollection {#2495 …}
      +children: []
      -id: 33027
      -titleTs: "'contain':7 'creat':4 'custom':9 'docker':6 'insid':11 'program':10"
      -bodyTs: "'account':6 'advanc':153 'alreadi':98,149 'also':72 'basic':144 'client':41,56,107 'complex':96 'compos':20 'configur':35,146 'connect':133 'contain':21,50,64 'crazi':156 'creat':47 'd':43,71 'docker':19,49,63 'done':150 'easi':90,141 'easy-medium':89 'edit':154 'enabl':109 'expos':59,121,129 'firewal':145 'free':5,23 'give':27 'gluetun':66,167 'hard':92 'hello':1 'hide.me':8,55 'idea':157 'implement':75 'insid':57 'instal':103 'instanc':69 'interfac':124 'ip':84 'key':30 'killswitch':77 'last':135 'leakag':85 'like':11,44,65,73,80 'medium':91 'miss':119 'network':123 'offici':40,54 'openvpn':32 'part':136 'plan':24 'possibl':162 'pretti':140 'prevent':83 'probabl':155 'run':52,105,114 'script':101 'someth':79,88,94 'startup':116 'thank':151 'think':138 'tips/something':148 'tri':13 'use':15 'vpn':110 'wireguard':34 'would':10,159"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1706287054
      +visibility: "visible             "
      +apId: "https://lemmy.kde.social/post/722914"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706200654 {#2177
        date: 2024-01-25 17:37:34.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Each container, by default, runs in a separate network namespace. You can use docker CLI to create specific networks that can be shared with other containers, or use docker-compose for it. Technically, for processes outside containers you can still use the same network of that container by running the inside the network namespace of the ‘VPN’ container (for example running them with unshare). However, I wouldn’t recommend this, as containers are supposed to run mostly isolated workload and not for this kind of use-case. But yeah, technically it’s feasible."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1706207127 {#2062
      date: 2024-01-25 19:25:27.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@tubbadu@lemmy.kde.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2379 …}
    +nested: Doctrine\ORM\PersistentCollection {#2383 …}
    +votes: Doctrine\ORM\PersistentCollection {#1906 …}
    +reports: Doctrine\ORM\PersistentCollection {#1926 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2380 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1363 …}
    -id: 339958
    -bodyTs: "'case':89 'cli':15 'compos':31 'contain':2,26,38,48,59,73 'creat':17 'default':4 'docker':14,30 'docker-compos':29 'exampl':61 'feasibl':95 'howev':66 'insid':52 'isol':79 'kind':85 'most':78 'namespac':10,55 'network':9,19,45,54 'outsid':37 'process':36 'recommend':70 'run':5,50,62,77 'separ':8 'share':23 'specif':18 'still':41 'suppos':75 'technic':34,92 'unshar':65 'use':13,28,42,88 'use-cas':87 'vpn':58 'workload':80 'wouldn':68 'yeah':91"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7007733"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706207127 {#1908
      date: 2024-01-25 19:25:27.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\BoostComponent {#3076
  +formDest: "entry_comment"
  +subject: App\Entity\EntryComment {#2079
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#1907
      +user: Proxies\__CG__\App\Entity\User {#2174 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-do-I-create-a-docker-container-with-custom-programs"
      +title: "How do I create a docker container with custom programs inside?"
      +url: null
      +body: """
        Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it to other docker containers (like gluetun does, for instance). I’d also like to implement a killswitch or something like that to prevent ip leakage. Is this something easy-medium hard or something very complex? I already have a script that installs and runs the client to enable vpn that should be run at startup, but I miss the “expose the network interface” and the “do not expose it if not connected” (this last part I think is pretty easy with a basic firewall configuration)\n
        \n
        any tips/something already done?  \n
        thanks in advance!\n
        \n
        EDIT: probably crazy idea, but would it be possible to do this in gluetun?
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 11
      +favouriteCount: 30
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1728784342 {#2178
        date: 2024-10-13 03:52:22.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#2010 …}
      +votes: Doctrine\ORM\PersistentCollection {#1990 …}
      +reports: Doctrine\ORM\PersistentCollection {#2004 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1349 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2352 …}
      +badges: Doctrine\ORM\PersistentCollection {#2495 …}
      +children: []
      -id: 33027
      -titleTs: "'contain':7 'creat':4 'custom':9 'docker':6 'insid':11 'program':10"
      -bodyTs: "'account':6 'advanc':153 'alreadi':98,149 'also':72 'basic':144 'client':41,56,107 'complex':96 'compos':20 'configur':35,146 'connect':133 'contain':21,50,64 'crazi':156 'creat':47 'd':43,71 'docker':19,49,63 'done':150 'easi':90,141 'easy-medium':89 'edit':154 'enabl':109 'expos':59,121,129 'firewal':145 'free':5,23 'give':27 'gluetun':66,167 'hard':92 'hello':1 'hide.me':8,55 'idea':157 'implement':75 'insid':57 'instal':103 'instanc':69 'interfac':124 'ip':84 'key':30 'killswitch':77 'last':135 'leakag':85 'like':11,44,65,73,80 'medium':91 'miss':119 'network':123 'offici':40,54 'openvpn':32 'part':136 'plan':24 'possibl':162 'pretti':140 'prevent':83 'probabl':155 'run':52,105,114 'script':101 'someth':79,88,94 'startup':116 'thank':151 'think':138 'tips/something':148 'tri':13 'use':15 'vpn':110 'wireguard':34 'would':10,159"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1706287054
      +visibility: "visible             "
      +apId: "https://lemmy.kde.social/post/722914"
      +editedAt: null
      +createdAt: DateTimeImmutable @1706200654 {#2177
        date: 2024-01-25 17:37:34.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Each container, by default, runs in a separate network namespace. You can use docker CLI to create specific networks that can be shared with other containers, or use docker-compose for it. Technically, for processes outside containers you can still use the same network of that container by running the inside the network namespace of the ‘VPN’ container (for example running them with unshare). However, I wouldn’t recommend this, as containers are supposed to run mostly isolated workload and not for this kind of use-case. But yeah, technically it’s feasible."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1706207127 {#2062
      date: 2024-01-25 19:25:27.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@tubbadu@lemmy.kde.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2379 …}
    +nested: Doctrine\ORM\PersistentCollection {#2383 …}
    +votes: Doctrine\ORM\PersistentCollection {#1906 …}
    +reports: Doctrine\ORM\PersistentCollection {#1926 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2380 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1363 …}
    -id: 339958
    -bodyTs: "'case':89 'cli':15 'compos':31 'contain':2,26,38,48,59,73 'creat':17 'default':4 'docker':14,30 'docker-compos':29 'exampl':61 'feasibl':95 'howev':66 'insid':52 'isol':79 'kind':85 'most':78 'namespac':10,55 'network':9,19,45,54 'outsid':37 'process':36 'recommend':70 'run':5,50,62,77 'separ':8 'share':23 'specif':18 'still':41 'suppos':75 'technic':34,92 'unshar':65 'use':13,28,42,88 'use-cas':87 'vpn':58 'workload':80 'wouldn':68 'yeah':91"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/7007733"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706207127 {#1908
      date: 2024-01-25 19:25:27.0 +01:00
    }
  }
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
entry_comment App\Twig\Components\EntryCommentComponent 12.0 MiB 20.98 ms
Input props
[
  "comment" => App\Entity\EntryComment {#2329
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2131 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2140
      +user: App\Entity\User {#265}
      +entry: Proxies\__CG__\App\Entity\Entry {#2300 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
      +image: null
      +parent: null
      +root: null
      +body: """
        You already mentioned the most important things.\n
        \n
        I will add, at the cost of being pedantic:\n
        \n
        - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
        - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
        - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
        \n
        If you want to go hardcore:\n
        \n
        - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
        - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1719122506 {#2323
        date: 2024-06-23 08:01:46.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyclohexane@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2289 …}
      +nested: Doctrine\ORM\PersistentCollection {#2326 …}
      +votes: Doctrine\ORM\PersistentCollection {#2314 …}
      +reports: Doctrine\ORM\PersistentCollection {#2241 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
      -id: 288266
      -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6473668"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704620762 {#2030
        date: 2024-01-07 10:46:02.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +body: "It’s the de-facto standard for runtime container security (sysdig is based on it). The only competitor afaik is aqua security’s tracee, which is way less mature. It is very well supporter, there are tons of rules maintained by the community and it is a CNCF project used by enterprise solutions (I.e., shouldn’t disappear overnight)."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704690575 {#2078
      date: 2024-01-08 06:09:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
      "@sudneo@lemmy.world"
      "@krash@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2350 …}
    +nested: Doctrine\ORM\PersistentCollection {#2330 …}
    +votes: Doctrine\ORM\PersistentCollection {#2346 …}
    +reports: Doctrine\ORM\PersistentCollection {#2347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2348 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2164 …}
    -id: 290565
    -bodyTs: "'afaik':20 'aqua':22 'base':14 'cncf':49 'communiti':44 'competitor':19 'contain':10 'de':5 'de-facto':4 'disappear':58 'enterpris':53 'facto':6 'i.e':55 'less':29 'maintain':41 'matur':30 'overnight':59 'project':50 'rule':40 'runtim':9 'secur':11,23 'shouldn':56 'solut':54 'standard':7 'support':35 'sysdig':12 'ton':38 'trace':25 'use':51 'way':28 'well':34"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6491825"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704690575 {#2097
      date: 2024-01-08 06:09:35.0 +01:00
    }
  }
  "showNested" => false
  "dateAsUrl" => true
  "showMagazineName" => true
  "showEntryTitle" => true
]
Attributes
[]
Component
App\Twig\Components\EntryCommentComponent {#3383
  +comment: App\Entity\EntryComment {#2329
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2131 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2140
      +user: App\Entity\User {#265}
      +entry: Proxies\__CG__\App\Entity\Entry {#2300 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
      +image: null
      +parent: null
      +root: null
      +body: """
        You already mentioned the most important things.\n
        \n
        I will add, at the cost of being pedantic:\n
        \n
        - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
        - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
        - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
        \n
        If you want to go hardcore:\n
        \n
        - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
        - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1719122506 {#2323
        date: 2024-06-23 08:01:46.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyclohexane@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2289 …}
      +nested: Doctrine\ORM\PersistentCollection {#2326 …}
      +votes: Doctrine\ORM\PersistentCollection {#2314 …}
      +reports: Doctrine\ORM\PersistentCollection {#2241 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
      -id: 288266
      -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6473668"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704620762 {#2030
        date: 2024-01-07 10:46:02.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +body: "It’s the de-facto standard for runtime container security (sysdig is based on it). The only competitor afaik is aqua security’s tracee, which is way less mature. It is very well supporter, there are tons of rules maintained by the community and it is a CNCF project used by enterprise solutions (I.e., shouldn’t disappear overnight)."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704690575 {#2078
      date: 2024-01-08 06:09:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
      "@sudneo@lemmy.world"
      "@krash@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2350 …}
    +nested: Doctrine\ORM\PersistentCollection {#2330 …}
    +votes: Doctrine\ORM\PersistentCollection {#2346 …}
    +reports: Doctrine\ORM\PersistentCollection {#2347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2348 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2164 …}
    -id: 290565
    -bodyTs: "'afaik':20 'aqua':22 'base':14 'cncf':49 'communiti':44 'competitor':19 'contain':10 'de':5 'de-facto':4 'disappear':58 'enterpris':53 'facto':6 'i.e':55 'less':29 'maintain':41 'matur':30 'overnight':59 'project':50 'rule':40 'runtim':9 'secur':11,23 'shouldn':56 'solut':54 'standard':7 'support':35 'sysdig':12 'ton':38 'trace':25 'use':51 'way':28 'well':34"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6491825"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704690575 {#2097
      date: 2024-01-08 06:09:35.0 +01:00
    }
  }
  +showMagazineName: true
  +showEntryTitle: true
  +showNested: false
  +level: 1
  +canSeeTrash: false
  +dateAsUrl: true
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
}
user_inline App\Twig\Components\UserInlineComponent 12.0 MiB 0.21 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "showAvatar" => false
]
Attributes
[]
Component
App\Twig\Components\UserInlineComponent {#3447
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +showAvatar: false
}
date App\Twig\Components\DateComponent 12.0 MiB 0.14 ms
Input props
[
  "date" => DateTimeImmutable @1704690575 {#2097
    date: 2024-01-08 06:09:35.0 +01:00
  }
]
Attributes
[]
Component
App\Twig\Components\DateComponent {#3503
  +date: DateTimeImmutable @1704690575 {#2097
    date: 2024-01-08 06:09:35.0 +01:00
  }
}
date_edited App\Twig\Components\DateEditedComponent 12.0 MiB 0.09 ms
Input props
[
  "createdAt" => DateTimeImmutable @1704690575 {#2097
    date: 2024-01-08 06:09:35.0 +01:00
  }
  "editedAt" => null
]
Attributes
[]
Component
App\Twig\Components\DateEditedComponent {#3557
  +createdAt: DateTimeImmutable @1704690575 {#2097
    date: 2024-01-08 06:09:35.0 +01:00
  }
  +editedAt: null
}
magazine_inline App\Twig\Components\MagazineInlineComponent 12.0 MiB 0.15 ms
Input props
[
  "magazine" => Proxies\__CG__\App\Entity\Magazine {#2384
    +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#2565
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
    +entries: Doctrine\ORM\PersistentCollection {#2589 …}
    +posts: Doctrine\ORM\PersistentCollection {#2592 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
    +bans: Doctrine\ORM\PersistentCollection {#2600 …}
    +reports: Doctrine\ORM\PersistentCollection {#2608 …}
    +badges: Doctrine\ORM\PersistentCollection {#2621 …}
    +logs: Doctrine\ORM\PersistentCollection {#2631 …}
    +awards: Doctrine\ORM\PersistentCollection {#2613 …}
    +categories: Doctrine\ORM\PersistentCollection {#2637 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#2566
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#2567
      date: 2023-11-02 13:51:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\MagazineInlineComponent {#3611
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
    +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#2565
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
    +entries: Doctrine\ORM\PersistentCollection {#2589 …}
    +posts: Doctrine\ORM\PersistentCollection {#2592 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
    +bans: Doctrine\ORM\PersistentCollection {#2600 …}
    +reports: Doctrine\ORM\PersistentCollection {#2608 …}
    +badges: Doctrine\ORM\PersistentCollection {#2621 …}
    +logs: Doctrine\ORM\PersistentCollection {#2631 …}
    +awards: Doctrine\ORM\PersistentCollection {#2613 …}
    +categories: Doctrine\ORM\PersistentCollection {#2637 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#2566
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#2567
      date: 2023-11-02 13:51:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showTitle: true
  +fullName: false
  +stretchedLink: false
  +showAvatar: false
}
entry_inline App\Twig\Components\EntryInlineComponent 12.0 MiB 0.12 ms
Input props
[
  "entry" => Proxies\__CG__\App\Entity\Entry {#2300
    +user: Proxies\__CG__\App\Entity\User {#3426 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
      +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#2565
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
      +entries: Doctrine\ORM\PersistentCollection {#2589 …}
      +posts: Doctrine\ORM\PersistentCollection {#2592 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
      +bans: Doctrine\ORM\PersistentCollection {#2600 …}
      +reports: Doctrine\ORM\PersistentCollection {#2608 …}
      +badges: Doctrine\ORM\PersistentCollection {#2621 …}
      +logs: Doctrine\ORM\PersistentCollection {#2631 …}
      +awards: Doctrine\ORM\PersistentCollection {#2613 …}
      +categories: Doctrine\ORM\PersistentCollection {#2637 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#2566
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#2567
        date: 2023-11-02 13:51:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
    +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
    +title: "How to secure (podman or docker) containers for public-facing hosting?"
    +url: null
    +body: """
      Context\n
      -------\n
      \n
      I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
      \n
      Requirements\n
      ------------\n
      \n
      I want to run applications within containers such that they\n
      \n
      - Must not be able to interfere with applications running on host\n
      - Must not be able to interfere with other containers or applications inside them\n
      - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
      \n
      > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
      \n
      What I found so far\n
      -------------------\n
      \n
      - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
      - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
      - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
      \n
      Alternative solution\n
      --------------------\n
      \n
      I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 21
    +favouriteCount: 83
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1719138740 {#3421
      date: 2024-06-23 12:32:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#3428 …}
    +votes: Doctrine\ORM\PersistentCollection {#3430 …}
    +reports: Doctrine\ORM\PersistentCollection {#3432 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
    +badges: Doctrine\ORM\PersistentCollection {#3438 …}
    +children: []
    -id: 27753
    -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
    -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704677667
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10216078"
    +editedAt: DateTimeImmutable @1712598393 {#3418
      date: 2024-04-08 19:46:33.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704591267 {#3420
      date: 2024-01-07 02:34:27.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\EntryInlineComponent {#3666
  +entry: Proxies\__CG__\App\Entity\Entry {#2300
    +user: Proxies\__CG__\App\Entity\User {#3426 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
      +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#2565
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
      +entries: Doctrine\ORM\PersistentCollection {#2589 …}
      +posts: Doctrine\ORM\PersistentCollection {#2592 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
      +bans: Doctrine\ORM\PersistentCollection {#2600 …}
      +reports: Doctrine\ORM\PersistentCollection {#2608 …}
      +badges: Doctrine\ORM\PersistentCollection {#2621 …}
      +logs: Doctrine\ORM\PersistentCollection {#2631 …}
      +awards: Doctrine\ORM\PersistentCollection {#2613 …}
      +categories: Doctrine\ORM\PersistentCollection {#2637 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#2566
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#2567
        date: 2023-11-02 13:51:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
    +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
    +title: "How to secure (podman or docker) containers for public-facing hosting?"
    +url: null
    +body: """
      Context\n
      -------\n
      \n
      I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
      \n
      Requirements\n
      ------------\n
      \n
      I want to run applications within containers such that they\n
      \n
      - Must not be able to interfere with applications running on host\n
      - Must not be able to interfere with other containers or applications inside them\n
      - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
      \n
      > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
      \n
      What I found so far\n
      -------------------\n
      \n
      - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
      - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
      - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
      \n
      Alternative solution\n
      --------------------\n
      \n
      I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 21
    +favouriteCount: 83
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1719138740 {#3421
      date: 2024-06-23 12:32:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#3428 …}
    +votes: Doctrine\ORM\PersistentCollection {#3430 …}
    +reports: Doctrine\ORM\PersistentCollection {#3432 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
    +badges: Doctrine\ORM\PersistentCollection {#3438 …}
    +children: []
    -id: 27753
    -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
    -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704677667
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10216078"
    +editedAt: DateTimeImmutable @1712598393 {#3418
      date: 2024-04-08 19:46:33.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704591267 {#3420
      date: 2024-01-07 02:34:27.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
}
user_avatar App\Twig\Components\UserAvatarComponent 12.0 MiB 0.13 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "width" => 40
  "height" => 40
  "asLink" => true
]
Attributes
[]
Component
App\Twig\Components\UserAvatarComponent {#3721
  +width: 40
  +height: 40
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +asLink: true
}
vote App\Twig\Components\VoteComponent 12.0 MiB 0.40 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2329
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2131 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2140
      +user: App\Entity\User {#265}
      +entry: Proxies\__CG__\App\Entity\Entry {#2300 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
      +image: null
      +parent: null
      +root: null
      +body: """
        You already mentioned the most important things.\n
        \n
        I will add, at the cost of being pedantic:\n
        \n
        - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
        - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
        - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
        \n
        If you want to go hardcore:\n
        \n
        - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
        - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1719122506 {#2323
        date: 2024-06-23 08:01:46.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyclohexane@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2289 …}
      +nested: Doctrine\ORM\PersistentCollection {#2326 …}
      +votes: Doctrine\ORM\PersistentCollection {#2314 …}
      +reports: Doctrine\ORM\PersistentCollection {#2241 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
      -id: 288266
      -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6473668"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704620762 {#2030
        date: 2024-01-07 10:46:02.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +body: "It’s the de-facto standard for runtime container security (sysdig is based on it). The only competitor afaik is aqua security’s tracee, which is way less mature. It is very well supporter, there are tons of rules maintained by the community and it is a CNCF project used by enterprise solutions (I.e., shouldn’t disappear overnight)."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704690575 {#2078
      date: 2024-01-08 06:09:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
      "@sudneo@lemmy.world"
      "@krash@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2350 …}
    +nested: Doctrine\ORM\PersistentCollection {#2330 …}
    +votes: Doctrine\ORM\PersistentCollection {#2346 …}
    +reports: Doctrine\ORM\PersistentCollection {#2347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2348 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2164 …}
    -id: 290565
    -bodyTs: "'afaik':20 'aqua':22 'base':14 'cncf':49 'communiti':44 'competitor':19 'contain':10 'de':5 'de-facto':4 'disappear':58 'enterpris':53 'facto':6 'i.e':55 'less':29 'maintain':41 'matur':30 'overnight':59 'project':50 'rule':40 'runtim':9 'secur':11,23 'shouldn':56 'solut':54 'standard':7 'support':35 'sysdig':12 'ton':38 'trace':25 'use':51 'way':28 'well':34"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6491825"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704690575 {#2097
      date: 2024-01-08 06:09:35.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\VoteComponent {#3790
  +subject: App\Entity\EntryComment {#2329
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2131 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2140
      +user: App\Entity\User {#265}
      +entry: Proxies\__CG__\App\Entity\Entry {#2300 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
      +image: null
      +parent: null
      +root: null
      +body: """
        You already mentioned the most important things.\n
        \n
        I will add, at the cost of being pedantic:\n
        \n
        - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
        - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
        - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
        \n
        If you want to go hardcore:\n
        \n
        - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
        - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1719122506 {#2323
        date: 2024-06-23 08:01:46.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyclohexane@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2289 …}
      +nested: Doctrine\ORM\PersistentCollection {#2326 …}
      +votes: Doctrine\ORM\PersistentCollection {#2314 …}
      +reports: Doctrine\ORM\PersistentCollection {#2241 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
      -id: 288266
      -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6473668"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704620762 {#2030
        date: 2024-01-07 10:46:02.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +body: "It’s the de-facto standard for runtime container security (sysdig is based on it). The only competitor afaik is aqua security’s tracee, which is way less mature. It is very well supporter, there are tons of rules maintained by the community and it is a CNCF project used by enterprise solutions (I.e., shouldn’t disappear overnight)."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704690575 {#2078
      date: 2024-01-08 06:09:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
      "@sudneo@lemmy.world"
      "@krash@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2350 …}
    +nested: Doctrine\ORM\PersistentCollection {#2330 …}
    +votes: Doctrine\ORM\PersistentCollection {#2346 …}
    +reports: Doctrine\ORM\PersistentCollection {#2347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2348 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2164 …}
    -id: 290565
    -bodyTs: "'afaik':20 'aqua':22 'base':14 'cncf':49 'communiti':44 'competitor':19 'contain':10 'de':5 'de-facto':4 'disappear':58 'enterpris':53 'facto':6 'i.e':55 'less':29 'maintain':41 'matur':30 'overnight':59 'project':50 'rule':40 'runtim':9 'secur':11,23 'shouldn':56 'solut':54 'standard':7 'support':35 'sysdig':12 'ton':38 'trace':25 'use':51 'way':28 'well':34"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6491825"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704690575 {#2097
      date: 2024-01-08 06:09:35.0 +01:00
    }
  }
  +formDest: "entry_comment"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
boost App\Twig\Components\BoostComponent 12.0 MiB 0.66 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2329
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2131 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2140
      +user: App\Entity\User {#265}
      +entry: Proxies\__CG__\App\Entity\Entry {#2300 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
      +image: null
      +parent: null
      +root: null
      +body: """
        You already mentioned the most important things.\n
        \n
        I will add, at the cost of being pedantic:\n
        \n
        - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
        - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
        - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
        \n
        If you want to go hardcore:\n
        \n
        - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
        - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1719122506 {#2323
        date: 2024-06-23 08:01:46.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyclohexane@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2289 …}
      +nested: Doctrine\ORM\PersistentCollection {#2326 …}
      +votes: Doctrine\ORM\PersistentCollection {#2314 …}
      +reports: Doctrine\ORM\PersistentCollection {#2241 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
      -id: 288266
      -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6473668"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704620762 {#2030
        date: 2024-01-07 10:46:02.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +body: "It’s the de-facto standard for runtime container security (sysdig is based on it). The only competitor afaik is aqua security’s tracee, which is way less mature. It is very well supporter, there are tons of rules maintained by the community and it is a CNCF project used by enterprise solutions (I.e., shouldn’t disappear overnight)."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704690575 {#2078
      date: 2024-01-08 06:09:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
      "@sudneo@lemmy.world"
      "@krash@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2350 …}
    +nested: Doctrine\ORM\PersistentCollection {#2330 …}
    +votes: Doctrine\ORM\PersistentCollection {#2346 …}
    +reports: Doctrine\ORM\PersistentCollection {#2347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2348 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2164 …}
    -id: 290565
    -bodyTs: "'afaik':20 'aqua':22 'base':14 'cncf':49 'communiti':44 'competitor':19 'contain':10 'de':5 'de-facto':4 'disappear':58 'enterpris':53 'facto':6 'i.e':55 'less':29 'maintain':41 'matur':30 'overnight':59 'project':50 'rule':40 'runtim':9 'secur':11,23 'shouldn':56 'solut':54 'standard':7 'support':35 'sysdig':12 'ton':38 'trace':25 'use':51 'way':28 'well':34"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6491825"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704690575 {#2097
      date: 2024-01-08 06:09:35.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\BoostComponent {#3847
  +formDest: "entry_comment"
  +subject: App\Entity\EntryComment {#2329
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2131 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2140
      +user: App\Entity\User {#265}
      +entry: Proxies\__CG__\App\Entity\Entry {#2300 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
      +image: null
      +parent: null
      +root: null
      +body: """
        You already mentioned the most important things.\n
        \n
        I will add, at the cost of being pedantic:\n
        \n
        - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
        - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
        - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
        \n
        If you want to go hardcore:\n
        \n
        - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
        - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1719122506 {#2323
        date: 2024-06-23 08:01:46.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyclohexane@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#2289 …}
      +nested: Doctrine\ORM\PersistentCollection {#2326 …}
      +votes: Doctrine\ORM\PersistentCollection {#2314 …}
      +reports: Doctrine\ORM\PersistentCollection {#2241 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
      +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
      -id: 288266
      -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6473668"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704620762 {#2030
        date: 2024-01-07 10:46:02.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +body: "It’s the de-facto standard for runtime container security (sysdig is based on it). The only competitor afaik is aqua security’s tracee, which is way less mature. It is very well supporter, there are tons of rules maintained by the community and it is a CNCF project used by enterprise solutions (I.e., shouldn’t disappear overnight)."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704690575 {#2078
      date: 2024-01-08 06:09:35.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
      "@sudneo@lemmy.world"
      "@krash@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2350 …}
    +nested: Doctrine\ORM\PersistentCollection {#2330 …}
    +votes: Doctrine\ORM\PersistentCollection {#2346 …}
    +reports: Doctrine\ORM\PersistentCollection {#2347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2348 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2164 …}
    -id: 290565
    -bodyTs: "'afaik':20 'aqua':22 'base':14 'cncf':49 'communiti':44 'competitor':19 'contain':10 'de':5 'de-facto':4 'disappear':58 'enterpris':53 'facto':6 'i.e':55 'less':29 'maintain':41 'matur':30 'overnight':59 'project':50 'rule':40 'runtim':9 'secur':11,23 'shouldn':56 'solut':54 'standard':7 'support':35 'sysdig':12 'ton':38 'trace':25 'use':51 'way':28 'well':34"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6491825"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704690575 {#2097
      date: 2024-01-08 06:09:35.0 +01:00
    }
  }
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
entry_comment App\Twig\Components\EntryCommentComponent 12.0 MiB 19.00 ms
Input props
[
  "comment" => Proxies\__CG__\App\Entity\EntryComment {#2140
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: """
      You already mentioned the most important things.\n
      \n
      I will add, at the cost of being pedantic:\n
      \n
      - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
      - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
      - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
      \n
      If you want to go hardcore:\n
      \n
      - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
      - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1719122506 {#2323
      date: 2024-06-23 08:01:46.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2289 …}
    +nested: Doctrine\ORM\PersistentCollection {#2326 …}
    +votes: Doctrine\ORM\PersistentCollection {#2314 …}
    +reports: Doctrine\ORM\PersistentCollection {#2241 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
    -id: 288266
    -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6473668"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704620762 {#2030
      date: 2024-01-07 10:46:02.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  "showNested" => false
  "dateAsUrl" => true
  "showMagazineName" => true
  "showEntryTitle" => true
]
Attributes
[]
Component
App\Twig\Components\EntryCommentComponent {#4096
  +comment: Proxies\__CG__\App\Entity\EntryComment {#2140
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: """
      You already mentioned the most important things.\n
      \n
      I will add, at the cost of being pedantic:\n
      \n
      - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
      - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
      - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
      \n
      If you want to go hardcore:\n
      \n
      - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
      - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1719122506 {#2323
      date: 2024-06-23 08:01:46.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2289 …}
    +nested: Doctrine\ORM\PersistentCollection {#2326 …}
    +votes: Doctrine\ORM\PersistentCollection {#2314 …}
    +reports: Doctrine\ORM\PersistentCollection {#2241 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
    -id: 288266
    -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6473668"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704620762 {#2030
      date: 2024-01-07 10:46:02.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showMagazineName: true
  +showEntryTitle: true
  +showNested: false
  +level: 1
  +canSeeTrash: false
  +dateAsUrl: true
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
}
user_inline App\Twig\Components\UserInlineComponent 12.0 MiB 0.12 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "showAvatar" => false
]
Attributes
[]
Component
App\Twig\Components\UserInlineComponent {#4141
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +showAvatar: false
}
date App\Twig\Components\DateComponent 12.0 MiB 0.13 ms
Input props
[
  "date" => DateTimeImmutable @1704620762 {#2030
    date: 2024-01-07 10:46:02.0 +01:00
  }
]
Attributes
[]
Component
App\Twig\Components\DateComponent {#4197
  +date: DateTimeImmutable @1704620762 {#2030
    date: 2024-01-07 10:46:02.0 +01:00
  }
}
date_edited App\Twig\Components\DateEditedComponent 12.0 MiB 0.08 ms
Input props
[
  "createdAt" => DateTimeImmutable @1704620762 {#2030
    date: 2024-01-07 10:46:02.0 +01:00
  }
  "editedAt" => null
]
Attributes
[]
Component
App\Twig\Components\DateEditedComponent {#4251
  +createdAt: DateTimeImmutable @1704620762 {#2030
    date: 2024-01-07 10:46:02.0 +01:00
  }
  +editedAt: null
}
magazine_inline App\Twig\Components\MagazineInlineComponent 12.0 MiB 0.13 ms
Input props
[
  "magazine" => Proxies\__CG__\App\Entity\Magazine {#2384
    +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#2565
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
    +entries: Doctrine\ORM\PersistentCollection {#2589 …}
    +posts: Doctrine\ORM\PersistentCollection {#2592 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
    +bans: Doctrine\ORM\PersistentCollection {#2600 …}
    +reports: Doctrine\ORM\PersistentCollection {#2608 …}
    +badges: Doctrine\ORM\PersistentCollection {#2621 …}
    +logs: Doctrine\ORM\PersistentCollection {#2631 …}
    +awards: Doctrine\ORM\PersistentCollection {#2613 …}
    +categories: Doctrine\ORM\PersistentCollection {#2637 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#2566
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#2567
      date: 2023-11-02 13:51:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\MagazineInlineComponent {#4305
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
    +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#2565
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
    +entries: Doctrine\ORM\PersistentCollection {#2589 …}
    +posts: Doctrine\ORM\PersistentCollection {#2592 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
    +bans: Doctrine\ORM\PersistentCollection {#2600 …}
    +reports: Doctrine\ORM\PersistentCollection {#2608 …}
    +badges: Doctrine\ORM\PersistentCollection {#2621 …}
    +logs: Doctrine\ORM\PersistentCollection {#2631 …}
    +awards: Doctrine\ORM\PersistentCollection {#2613 …}
    +categories: Doctrine\ORM\PersistentCollection {#2637 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#2566
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#2567
      date: 2023-11-02 13:51:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showTitle: true
  +fullName: false
  +stretchedLink: false
  +showAvatar: false
}
entry_inline App\Twig\Components\EntryInlineComponent 12.0 MiB 0.12 ms
Input props
[
  "entry" => Proxies\__CG__\App\Entity\Entry {#2300
    +user: Proxies\__CG__\App\Entity\User {#3426 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
      +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#2565
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
      +entries: Doctrine\ORM\PersistentCollection {#2589 …}
      +posts: Doctrine\ORM\PersistentCollection {#2592 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
      +bans: Doctrine\ORM\PersistentCollection {#2600 …}
      +reports: Doctrine\ORM\PersistentCollection {#2608 …}
      +badges: Doctrine\ORM\PersistentCollection {#2621 …}
      +logs: Doctrine\ORM\PersistentCollection {#2631 …}
      +awards: Doctrine\ORM\PersistentCollection {#2613 …}
      +categories: Doctrine\ORM\PersistentCollection {#2637 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#2566
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#2567
        date: 2023-11-02 13:51:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
    +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
    +title: "How to secure (podman or docker) containers for public-facing hosting?"
    +url: null
    +body: """
      Context\n
      -------\n
      \n
      I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
      \n
      Requirements\n
      ------------\n
      \n
      I want to run applications within containers such that they\n
      \n
      - Must not be able to interfere with applications running on host\n
      - Must not be able to interfere with other containers or applications inside them\n
      - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
      \n
      > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
      \n
      What I found so far\n
      -------------------\n
      \n
      - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
      - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
      - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
      \n
      Alternative solution\n
      --------------------\n
      \n
      I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 21
    +favouriteCount: 83
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1719138740 {#3421
      date: 2024-06-23 12:32:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#3428 …}
    +votes: Doctrine\ORM\PersistentCollection {#3430 …}
    +reports: Doctrine\ORM\PersistentCollection {#3432 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
    +badges: Doctrine\ORM\PersistentCollection {#3438 …}
    +children: []
    -id: 27753
    -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
    -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704677667
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10216078"
    +editedAt: DateTimeImmutable @1712598393 {#3418
      date: 2024-04-08 19:46:33.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704591267 {#3420
      date: 2024-01-07 02:34:27.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\EntryInlineComponent {#4360
  +entry: Proxies\__CG__\App\Entity\Entry {#2300
    +user: Proxies\__CG__\App\Entity\User {#3426 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
      +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#2565
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
      +entries: Doctrine\ORM\PersistentCollection {#2589 …}
      +posts: Doctrine\ORM\PersistentCollection {#2592 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
      +bans: Doctrine\ORM\PersistentCollection {#2600 …}
      +reports: Doctrine\ORM\PersistentCollection {#2608 …}
      +badges: Doctrine\ORM\PersistentCollection {#2621 …}
      +logs: Doctrine\ORM\PersistentCollection {#2631 …}
      +awards: Doctrine\ORM\PersistentCollection {#2613 …}
      +categories: Doctrine\ORM\PersistentCollection {#2637 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#2566
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#2567
        date: 2023-11-02 13:51:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
    +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
    +title: "How to secure (podman or docker) containers for public-facing hosting?"
    +url: null
    +body: """
      Context\n
      -------\n
      \n
      I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
      \n
      Requirements\n
      ------------\n
      \n
      I want to run applications within containers such that they\n
      \n
      - Must not be able to interfere with applications running on host\n
      - Must not be able to interfere with other containers or applications inside them\n
      - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
      \n
      > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
      \n
      What I found so far\n
      -------------------\n
      \n
      - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
      - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
      - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
      \n
      Alternative solution\n
      --------------------\n
      \n
      I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 21
    +favouriteCount: 83
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1719138740 {#3421
      date: 2024-06-23 12:32:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#3428 …}
    +votes: Doctrine\ORM\PersistentCollection {#3430 …}
    +reports: Doctrine\ORM\PersistentCollection {#3432 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
    +badges: Doctrine\ORM\PersistentCollection {#3438 …}
    +children: []
    -id: 27753
    -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
    -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704677667
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/10216078"
    +editedAt: DateTimeImmutable @1712598393 {#3418
      date: 2024-04-08 19:46:33.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704591267 {#3420
      date: 2024-01-07 02:34:27.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
}
user_avatar App\Twig\Components\UserAvatarComponent 12.0 MiB 0.15 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "width" => 40
  "height" => 40
  "asLink" => true
]
Attributes
[]
Component
App\Twig\Components\UserAvatarComponent {#4415
  +width: 40
  +height: 40
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +asLink: true
}
vote App\Twig\Components\VoteComponent 12.0 MiB 0.39 ms
Input props
[
  "subject" => Proxies\__CG__\App\Entity\EntryComment {#2140
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: """
      You already mentioned the most important things.\n
      \n
      I will add, at the cost of being pedantic:\n
      \n
      - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
      - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
      - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
      \n
      If you want to go hardcore:\n
      \n
      - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
      - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1719122506 {#2323
      date: 2024-06-23 08:01:46.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2289 …}
    +nested: Doctrine\ORM\PersistentCollection {#2326 …}
    +votes: Doctrine\ORM\PersistentCollection {#2314 …}
    +reports: Doctrine\ORM\PersistentCollection {#2241 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
    -id: 288266
    -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6473668"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704620762 {#2030
      date: 2024-01-07 10:46:02.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\VoteComponent {#4531
  +subject: Proxies\__CG__\App\Entity\EntryComment {#2140
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: """
      You already mentioned the most important things.\n
      \n
      I will add, at the cost of being pedantic:\n
      \n
      - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
      - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
      - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
      \n
      If you want to go hardcore:\n
      \n
      - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
      - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1719122506 {#2323
      date: 2024-06-23 08:01:46.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2289 …}
    +nested: Doctrine\ORM\PersistentCollection {#2326 …}
    +votes: Doctrine\ORM\PersistentCollection {#2314 …}
    +reports: Doctrine\ORM\PersistentCollection {#2241 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
    -id: 288266
    -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6473668"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704620762 {#2030
      date: 2024-01-07 10:46:02.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +formDest: "entry_comment"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
boost App\Twig\Components\BoostComponent 12.0 MiB 0.61 ms
Input props
[
  "subject" => Proxies\__CG__\App\Entity\EntryComment {#2140
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: """
      You already mentioned the most important things.\n
      \n
      I will add, at the cost of being pedantic:\n
      \n
      - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
      - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
      - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
      \n
      If you want to go hardcore:\n
      \n
      - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
      - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1719122506 {#2323
      date: 2024-06-23 08:01:46.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2289 …}
    +nested: Doctrine\ORM\PersistentCollection {#2326 …}
    +votes: Doctrine\ORM\PersistentCollection {#2314 …}
    +reports: Doctrine\ORM\PersistentCollection {#2241 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
    -id: 288266
    -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6473668"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704620762 {#2030
      date: 2024-01-07 10:46:02.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\BoostComponent {#4588
  +formDest: "entry_comment"
  +subject: Proxies\__CG__\App\Entity\EntryComment {#2140
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2300
      +user: Proxies\__CG__\App\Entity\User {#3426 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#2009 …}
      +slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
      +title: "How to secure (podman or docker) containers for public-facing hosting?"
      +url: null
      +body: """
        Context\n
        -------\n
        \n
        I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
        \n
        Requirements\n
        ------------\n
        \n
        I want to run applications within containers such that they\n
        \n
        - Must not be able to interfere with applications running on host\n
        - Must not be able to interfere with other containers or applications inside them\n
        - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
        \n
        > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
        \n
        What I found so far\n
        -------------------\n
        \n
        - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
        - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
        - **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
        \n
        Alternative solution\n
        --------------------\n
        \n
        I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
        """
      +type: "article"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 21
      +favouriteCount: 83
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1719138740 {#3421
        date: 2024-06-23 12:32:20.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#3428 …}
      +votes: Doctrine\ORM\PersistentCollection {#3430 …}
      +reports: Doctrine\ORM\PersistentCollection {#3432 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3434 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3436 …}
      +badges: Doctrine\ORM\PersistentCollection {#3438 …}
      +children: []
      -id: 27753
      -titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
      -bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1704677667
      +visibility: "visible             "
      +apId: "https://lemmy.ml/post/10216078"
      +editedAt: DateTimeImmutable @1712598393 {#3418
        date: 2024-04-08 19:46:33.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704591267 {#3420
        date: 2024-01-07 02:34:27.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: null
    +root: null
    +body: """
      You already mentioned the most important things.\n
      \n
      I will add, at the cost of being pedantic:\n
      \n
      - build the image properly, or use good images. This means limit dependencies as much as possible, as minimal images as possible (less updates due to CVEs, less tooling).\n
      - do not mount host volumes, if you really have to, use a dedicated subpath owned by the user of the container. Do not use homedirs etc.\n
      - do not run in host namespaces, like host network etc. Use port mapping to send traffic to the container.\n
      \n
      If you want to go hardcore:\n
      \n
      - analyze your application, and if feasible, build and use a more restrictive seccomp profile compared to the default. This might limit additional syscalls that might be used during an exploitation but that your app doesn’t need.\n
      - run falco on the node. Even with the default set of rules (nothing custom), many exploitation or posts-exploitation steps would be caught, such as “shell spawned” etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1719122506 {#2323
      date: 2024-06-23 08:01:46.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@cyclohexane@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2289 …}
    +nested: Doctrine\ORM\PersistentCollection {#2326 …}
    +votes: Doctrine\ORM\PersistentCollection {#2314 …}
    +reports: Doctrine\ORM\PersistentCollection {#2241 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2324 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2340 …}
    -id: 288266
    -bodyTs: "'add':10 'addit':117 'alreadi':2 'analyz':96 'app':129 'applic':98 'build':17,102 'caught':156 'compar':110 'contain':65,89 'cost':13 'custom':146 'cves':42 'dedic':57 'default':113,141 'depend':28 'doesn':130 'due':40 'etc':70,80,161 'even':138 'exploit':125,148,152 'falco':134 'feasibl':101 'go':94 'good':23 'hardcor':95 'homedir':69 'host':48,75,78 'imag':19,24,35 'import':6 'less':38,43 'like':77 'limit':27,116 'mani':147 'map':83 'mean':26 'mention':3 'might':115,120 'minim':34 'mount':47 'much':30 'namespac':76 'need':132 'network':79 'node':137 'noth':145 'own':59 'pedant':16 'port':82 'possibl':32,37 'post':151 'posts-exploit':150 'profil':109 'proper':20 'realli':52 'restrict':107 'rule':144 'run':73,133 'seccomp':108 'send':85 'set':142 'shell':159 'spawn':160 'step':153 'subpath':58 'syscal':118 'thing':7 'tool':44 'traffic':86 'updat':39 'use':22,55,68,81,104,122 'user':62 'volum':49 'want':92 'would':154"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6473668"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704620762 {#2030
      date: 2024-01-07 10:46:02.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
entry_comment App\Twig\Components\EntryCommentComponent 12.0 MiB 40.35 ms
Input props
[
  "comment" => App\Entity\EntryComment {#2351
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2141
      +user: Proxies\__CG__\App\Entity\User {#4880 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
        +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
        +name: "selfhosted@lemmy.world"
        +title: "selfhosted"
        +description: """
          A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
          \n
          Rules:\n
          \n
          - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
          - No spam posting.\n
          - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
          - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
          - No trolling.\n
          \n
          Resources:\n
          \n
          - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
          - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
          - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
          \n
          > Any issues on the community? Report it using the report flag.\n
          \n
          > Questions? DM the mods!
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 222
        +entryCommentCount: 3916
        +postCount: 0
        +postCommentCount: 0
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582735 {#4953
          date: 2024-10-22 09:38:55.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
        +entries: Doctrine\ORM\PersistentCollection {#4966 …}
        +posts: Doctrine\ORM\PersistentCollection {#4968 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
        +bans: Doctrine\ORM\PersistentCollection {#4972 …}
        +reports: Doctrine\ORM\PersistentCollection {#4974 …}
        +badges: Doctrine\ORM\PersistentCollection {#4976 …}
        +logs: Doctrine\ORM\PersistentCollection {#4978 …}
        +awards: Doctrine\ORM\PersistentCollection {#4980 …}
        +categories: Doctrine\ORM\PersistentCollection {#4982 …}
        -id: 120
        +apId: "selfhosted@lemmy.world"
        +apProfileId: "https://lemmy.world/c/selfhosted"
        +apPublicUrl: "https://lemmy.world/c/selfhosted"
        +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
        +apInboxUrl: "https://lemmy.world/inbox"
        +apDomain: "lemmy.world"
        +apPreferredUsername: "selfhosted"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1703473826 {#4950
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1703473826 {#4952
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#4882 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#4883 …}
      +slug: "Stalwart-v0-5-0"
      +title: "Stalwart v0.5.0"
      +url: "https://stalw.art/blog/storage-performance/"
      +body: """
        **Elevating Performance and Flexibility**\n
        \n
        We are excited to announce the release of Stalwart Mail Server v0.5.0. As we approach the end of the year, this significant update marks a major advancement in our journey to provide a robust, efficient, and versatile mail server solution. This latest version incorporates a range of performance enhancements, storage layer improvements, and new features, designed to elevate your email server experience.
        """
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 40
      +favouriteCount: 119
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1720677469 {#4875
        date: 2024-07-11 07:57:49.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#4884 …}
      +votes: Doctrine\ORM\PersistentCollection {#4886 …}
      +reports: Doctrine\ORM\PersistentCollection {#4888 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4890 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4892 …}
      +badges: Doctrine\ORM\PersistentCollection {#4894 …}
      +children: []
      -id: 25264
      -titleTs: "'stalwart':1 'v0.5.0':2"
      -bodyTs: "'advanc':31 'announc':9 'approach':19 'design':60 'effici':39 'elev':1,62 'email':64 'end':21 'enhanc':53 'excit':7 'experi':66 'featur':59 'flexibl':4 'improv':56 'incorpor':48 'journey':34 'latest':46 'layer':55 'mail':14,42 'major':30 'mark':28 'new':58 'perform':2,52 'provid':36 'rang':50 'releas':11 'robust':38 'server':15,43,65 'signific':26 'solut':44 'stalwart':13 'storag':54 'updat':27 'v0.5.0':16 'versatil':41 'version':47 'year':24"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1703792857
      +visibility: "visible             "
      +apId: "https://lemmy.world/post/10034802"
      +editedAt: DateTimeImmutable @1708508842 {#4872
        date: 2024-02-21 10:47:22.0 +01:00
      }
      +createdAt: DateTimeImmutable @1703706457 {#4874
        date: 2023-12-27 20:47:37.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2138 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2129 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2130 …}
    +body: """
      I don’t think it’s you, it generally is a bad practice to have multiple processes inside a container. It usually defeats most of the isolation, introduces problems with handling zombie processes (therefore you need an init) and restarting tools when they crash (then you need something like supervisord, which I guess this image might use - I didn’t check). Each software adds dependencies, which can conflict (again defeating the idea of containers), and of course CVEs. Then you have a problem with users etc.\n
      \n
      So yeah, containers are generally not meant to be used this way. The project might be cool but I would be very uncomfortable running it like this, especially if that’s going to be my primary email, with all the password resetting capabilities etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1703756461 {#2349
      date: 2023-12-28 10:41:01.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Parachute4196@lemmy.world"
      "@eskuero@lemmy.fromshado.ws"
      "@ikidd@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2094 …}
    +nested: Doctrine\ORM\PersistentCollection {#2093 …}
    +votes: Doctrine\ORM\PersistentCollection {#2086 …}
    +reports: Doctrine\ORM\PersistentCollection {#2087 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2088 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2064 …}
    -id: 258804
    -bodyTs: "'add':64 'bad':12 'capabl':129 'check':61 'conflict':68 'contain':20,74,89 'cool':103 'cours':77 'crash':44 'cves':78 'defeat':23,70 'depend':65 'didn':59 'email':123 'especi':114 'etc':86,130 'general':9,91 'go':118 'guess':53 'handl':31 'idea':72 'imag':55 'init':38 'insid':18 'introduc':28 'isol':27 'like':49,112 'meant':93 'might':56,101 'multipl':16 'need':36,47 'password':127 'practic':13 'primari':122 'problem':29,83 'process':17,33 'project':100 'reset':128 'restart':40 'run':110 'softwar':63 'someth':48 'supervisord':50 'therefor':34 'think':4 'tool':41 'uncomfort':109 'use':57,96 'user':85 'usual':22 'way':98 'would':106 'yeah':88 'zombi':32"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6274200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703756461 {#2331
      date: 2023-12-28 10:41:01.0 +01:00
    }
  }
  "showNested" => false
  "dateAsUrl" => true
  "showMagazineName" => true
  "showEntryTitle" => true
]
Attributes
[]
Component
App\Twig\Components\EntryCommentComponent {#4837
  +comment: App\Entity\EntryComment {#2351
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2141
      +user: Proxies\__CG__\App\Entity\User {#4880 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
        +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
        +name: "selfhosted@lemmy.world"
        +title: "selfhosted"
        +description: """
          A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
          \n
          Rules:\n
          \n
          - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
          - No spam posting.\n
          - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
          - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
          - No trolling.\n
          \n
          Resources:\n
          \n
          - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
          - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
          - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
          \n
          > Any issues on the community? Report it using the report flag.\n
          \n
          > Questions? DM the mods!
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 222
        +entryCommentCount: 3916
        +postCount: 0
        +postCommentCount: 0
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582735 {#4953
          date: 2024-10-22 09:38:55.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
        +entries: Doctrine\ORM\PersistentCollection {#4966 …}
        +posts: Doctrine\ORM\PersistentCollection {#4968 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
        +bans: Doctrine\ORM\PersistentCollection {#4972 …}
        +reports: Doctrine\ORM\PersistentCollection {#4974 …}
        +badges: Doctrine\ORM\PersistentCollection {#4976 …}
        +logs: Doctrine\ORM\PersistentCollection {#4978 …}
        +awards: Doctrine\ORM\PersistentCollection {#4980 …}
        +categories: Doctrine\ORM\PersistentCollection {#4982 …}
        -id: 120
        +apId: "selfhosted@lemmy.world"
        +apProfileId: "https://lemmy.world/c/selfhosted"
        +apPublicUrl: "https://lemmy.world/c/selfhosted"
        +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
        +apInboxUrl: "https://lemmy.world/inbox"
        +apDomain: "lemmy.world"
        +apPreferredUsername: "selfhosted"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1703473826 {#4950
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1703473826 {#4952
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#4882 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#4883 …}
      +slug: "Stalwart-v0-5-0"
      +title: "Stalwart v0.5.0"
      +url: "https://stalw.art/blog/storage-performance/"
      +body: """
        **Elevating Performance and Flexibility**\n
        \n
        We are excited to announce the release of Stalwart Mail Server v0.5.0. As we approach the end of the year, this significant update marks a major advancement in our journey to provide a robust, efficient, and versatile mail server solution. This latest version incorporates a range of performance enhancements, storage layer improvements, and new features, designed to elevate your email server experience.
        """
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 40
      +favouriteCount: 119
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1720677469 {#4875
        date: 2024-07-11 07:57:49.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#4884 …}
      +votes: Doctrine\ORM\PersistentCollection {#4886 …}
      +reports: Doctrine\ORM\PersistentCollection {#4888 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4890 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4892 …}
      +badges: Doctrine\ORM\PersistentCollection {#4894 …}
      +children: []
      -id: 25264
      -titleTs: "'stalwart':1 'v0.5.0':2"
      -bodyTs: "'advanc':31 'announc':9 'approach':19 'design':60 'effici':39 'elev':1,62 'email':64 'end':21 'enhanc':53 'excit':7 'experi':66 'featur':59 'flexibl':4 'improv':56 'incorpor':48 'journey':34 'latest':46 'layer':55 'mail':14,42 'major':30 'mark':28 'new':58 'perform':2,52 'provid':36 'rang':50 'releas':11 'robust':38 'server':15,43,65 'signific':26 'solut':44 'stalwart':13 'storag':54 'updat':27 'v0.5.0':16 'versatil':41 'version':47 'year':24"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1703792857
      +visibility: "visible             "
      +apId: "https://lemmy.world/post/10034802"
      +editedAt: DateTimeImmutable @1708508842 {#4872
        date: 2024-02-21 10:47:22.0 +01:00
      }
      +createdAt: DateTimeImmutable @1703706457 {#4874
        date: 2023-12-27 20:47:37.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2138 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2129 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2130 …}
    +body: """
      I don’t think it’s you, it generally is a bad practice to have multiple processes inside a container. It usually defeats most of the isolation, introduces problems with handling zombie processes (therefore you need an init) and restarting tools when they crash (then you need something like supervisord, which I guess this image might use - I didn’t check). Each software adds dependencies, which can conflict (again defeating the idea of containers), and of course CVEs. Then you have a problem with users etc.\n
      \n
      So yeah, containers are generally not meant to be used this way. The project might be cool but I would be very uncomfortable running it like this, especially if that’s going to be my primary email, with all the password resetting capabilities etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1703756461 {#2349
      date: 2023-12-28 10:41:01.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Parachute4196@lemmy.world"
      "@eskuero@lemmy.fromshado.ws"
      "@ikidd@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2094 …}
    +nested: Doctrine\ORM\PersistentCollection {#2093 …}
    +votes: Doctrine\ORM\PersistentCollection {#2086 …}
    +reports: Doctrine\ORM\PersistentCollection {#2087 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2088 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2064 …}
    -id: 258804
    -bodyTs: "'add':64 'bad':12 'capabl':129 'check':61 'conflict':68 'contain':20,74,89 'cool':103 'cours':77 'crash':44 'cves':78 'defeat':23,70 'depend':65 'didn':59 'email':123 'especi':114 'etc':86,130 'general':9,91 'go':118 'guess':53 'handl':31 'idea':72 'imag':55 'init':38 'insid':18 'introduc':28 'isol':27 'like':49,112 'meant':93 'might':56,101 'multipl':16 'need':36,47 'password':127 'practic':13 'primari':122 'problem':29,83 'process':17,33 'project':100 'reset':128 'restart':40 'run':110 'softwar':63 'someth':48 'supervisord':50 'therefor':34 'think':4 'tool':41 'uncomfort':109 'use':57,96 'user':85 'usual':22 'way':98 'would':106 'yeah':88 'zombi':32"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6274200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703756461 {#2331
      date: 2023-12-28 10:41:01.0 +01:00
    }
  }
  +showMagazineName: true
  +showEntryTitle: true
  +showNested: false
  +level: 1
  +canSeeTrash: false
  +dateAsUrl: true
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
}
user_inline App\Twig\Components\UserInlineComponent 12.0 MiB 0.16 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "showAvatar" => false
]
Attributes
[]
Component
App\Twig\Components\UserInlineComponent {#4903
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +showAvatar: false
}
date App\Twig\Components\DateComponent 12.0 MiB 0.16 ms
Input props
[
  "date" => DateTimeImmutable @1703756461 {#2331
    date: 2023-12-28 10:41:01.0 +01:00
  }
]
Attributes
[]
Component
App\Twig\Components\DateComponent {#4993
  +date: DateTimeImmutable @1703756461 {#2331
    date: 2023-12-28 10:41:01.0 +01:00
  }
}
date_edited App\Twig\Components\DateEditedComponent 12.0 MiB 0.08 ms
Input props
[
  "createdAt" => DateTimeImmutable @1703756461 {#2331
    date: 2023-12-28 10:41:01.0 +01:00
  }
  "editedAt" => null
]
Attributes
[]
Component
App\Twig\Components\DateEditedComponent {#5047
  +createdAt: DateTimeImmutable @1703756461 {#2331
    date: 2023-12-28 10:41:01.0 +01:00
  }
  +editedAt: null
}
magazine_inline App\Twig\Components\MagazineInlineComponent 12.0 MiB 0.12 ms
Input props
[
  "magazine" => Proxies\__CG__\App\Entity\Magazine {#2138
    +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#4953
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
    +entries: Doctrine\ORM\PersistentCollection {#4966 …}
    +posts: Doctrine\ORM\PersistentCollection {#4968 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
    +bans: Doctrine\ORM\PersistentCollection {#4972 …}
    +reports: Doctrine\ORM\PersistentCollection {#4974 …}
    +badges: Doctrine\ORM\PersistentCollection {#4976 …}
    +logs: Doctrine\ORM\PersistentCollection {#4978 …}
    +awards: Doctrine\ORM\PersistentCollection {#4980 …}
    +categories: Doctrine\ORM\PersistentCollection {#4982 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#4950
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#4952
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\MagazineInlineComponent {#5101
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
    +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#4953
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
    +entries: Doctrine\ORM\PersistentCollection {#4966 …}
    +posts: Doctrine\ORM\PersistentCollection {#4968 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
    +bans: Doctrine\ORM\PersistentCollection {#4972 …}
    +reports: Doctrine\ORM\PersistentCollection {#4974 …}
    +badges: Doctrine\ORM\PersistentCollection {#4976 …}
    +logs: Doctrine\ORM\PersistentCollection {#4978 …}
    +awards: Doctrine\ORM\PersistentCollection {#4980 …}
    +categories: Doctrine\ORM\PersistentCollection {#4982 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#4950
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#4952
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showTitle: true
  +fullName: false
  +stretchedLink: false
  +showAvatar: false
}
entry_inline App\Twig\Components\EntryInlineComponent 12.0 MiB 0.13 ms
Input props
[
  "entry" => Proxies\__CG__\App\Entity\Entry {#2141
    +user: Proxies\__CG__\App\Entity\User {#4880 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
      +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#4953
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
      +entries: Doctrine\ORM\PersistentCollection {#4966 …}
      +posts: Doctrine\ORM\PersistentCollection {#4968 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
      +bans: Doctrine\ORM\PersistentCollection {#4972 …}
      +reports: Doctrine\ORM\PersistentCollection {#4974 …}
      +badges: Doctrine\ORM\PersistentCollection {#4976 …}
      +logs: Doctrine\ORM\PersistentCollection {#4978 …}
      +awards: Doctrine\ORM\PersistentCollection {#4980 …}
      +categories: Doctrine\ORM\PersistentCollection {#4982 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#4950
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#4952
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: Proxies\__CG__\App\Entity\Image {#4882 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#4883 …}
    +slug: "Stalwart-v0-5-0"
    +title: "Stalwart v0.5.0"
    +url: "https://stalw.art/blog/storage-performance/"
    +body: """
      **Elevating Performance and Flexibility**\n
      \n
      We are excited to announce the release of Stalwart Mail Server v0.5.0. As we approach the end of the year, this significant update marks a major advancement in our journey to provide a robust, efficient, and versatile mail server solution. This latest version incorporates a range of performance enhancements, storage layer improvements, and new features, designed to elevate your email server experience.
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 40
    +favouriteCount: 119
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1720677469 {#4875
      date: 2024-07-11 07:57:49.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#4884 …}
    +votes: Doctrine\ORM\PersistentCollection {#4886 …}
    +reports: Doctrine\ORM\PersistentCollection {#4888 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4890 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4892 …}
    +badges: Doctrine\ORM\PersistentCollection {#4894 …}
    +children: []
    -id: 25264
    -titleTs: "'stalwart':1 'v0.5.0':2"
    -bodyTs: "'advanc':31 'announc':9 'approach':19 'design':60 'effici':39 'elev':1,62 'email':64 'end':21 'enhanc':53 'excit':7 'experi':66 'featur':59 'flexibl':4 'improv':56 'incorpor':48 'journey':34 'latest':46 'layer':55 'mail':14,42 'major':30 'mark':28 'new':58 'perform':2,52 'provid':36 'rang':50 'releas':11 'robust':38 'server':15,43,65 'signific':26 'solut':44 'stalwart':13 'storag':54 'updat':27 'v0.5.0':16 'versatil':41 'version':47 'year':24"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703792857
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10034802"
    +editedAt: DateTimeImmutable @1708508842 {#4872
      date: 2024-02-21 10:47:22.0 +01:00
    }
    +createdAt: DateTimeImmutable @1703706457 {#4874
      date: 2023-12-27 20:47:37.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\EntryInlineComponent {#5156
  +entry: Proxies\__CG__\App\Entity\Entry {#2141
    +user: Proxies\__CG__\App\Entity\User {#4880 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
      +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#4953
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
      +entries: Doctrine\ORM\PersistentCollection {#4966 …}
      +posts: Doctrine\ORM\PersistentCollection {#4968 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
      +bans: Doctrine\ORM\PersistentCollection {#4972 …}
      +reports: Doctrine\ORM\PersistentCollection {#4974 …}
      +badges: Doctrine\ORM\PersistentCollection {#4976 …}
      +logs: Doctrine\ORM\PersistentCollection {#4978 …}
      +awards: Doctrine\ORM\PersistentCollection {#4980 …}
      +categories: Doctrine\ORM\PersistentCollection {#4982 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#4950
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#4952
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: Proxies\__CG__\App\Entity\Image {#4882 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#4883 …}
    +slug: "Stalwart-v0-5-0"
    +title: "Stalwart v0.5.0"
    +url: "https://stalw.art/blog/storage-performance/"
    +body: """
      **Elevating Performance and Flexibility**\n
      \n
      We are excited to announce the release of Stalwart Mail Server v0.5.0. As we approach the end of the year, this significant update marks a major advancement in our journey to provide a robust, efficient, and versatile mail server solution. This latest version incorporates a range of performance enhancements, storage layer improvements, and new features, designed to elevate your email server experience.
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 40
    +favouriteCount: 119
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1720677469 {#4875
      date: 2024-07-11 07:57:49.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#4884 …}
    +votes: Doctrine\ORM\PersistentCollection {#4886 …}
    +reports: Doctrine\ORM\PersistentCollection {#4888 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4890 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4892 …}
    +badges: Doctrine\ORM\PersistentCollection {#4894 …}
    +children: []
    -id: 25264
    -titleTs: "'stalwart':1 'v0.5.0':2"
    -bodyTs: "'advanc':31 'announc':9 'approach':19 'design':60 'effici':39 'elev':1,62 'email':64 'end':21 'enhanc':53 'excit':7 'experi':66 'featur':59 'flexibl':4 'improv':56 'incorpor':48 'journey':34 'latest':46 'layer':55 'mail':14,42 'major':30 'mark':28 'new':58 'perform':2,52 'provid':36 'rang':50 'releas':11 'robust':38 'server':15,43,65 'signific':26 'solut':44 'stalwart':13 'storag':54 'updat':27 'v0.5.0':16 'versatil':41 'version':47 'year':24"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703792857
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10034802"
    +editedAt: DateTimeImmutable @1708508842 {#4872
      date: 2024-02-21 10:47:22.0 +01:00
    }
    +createdAt: DateTimeImmutable @1703706457 {#4874
      date: 2023-12-27 20:47:37.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
}
user_avatar App\Twig\Components\UserAvatarComponent 12.0 MiB 0.18 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "width" => 40
  "height" => 40
  "asLink" => true
]
Attributes
[]
Component
App\Twig\Components\UserAvatarComponent {#5211
  +width: 40
  +height: 40
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +asLink: true
}
vote App\Twig\Components\VoteComponent 12.0 MiB 0.40 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2351
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2141
      +user: Proxies\__CG__\App\Entity\User {#4880 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
        +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
        +name: "selfhosted@lemmy.world"
        +title: "selfhosted"
        +description: """
          A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
          \n
          Rules:\n
          \n
          - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
          - No spam posting.\n
          - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
          - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
          - No trolling.\n
          \n
          Resources:\n
          \n
          - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
          - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
          - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
          \n
          > Any issues on the community? Report it using the report flag.\n
          \n
          > Questions? DM the mods!
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 222
        +entryCommentCount: 3916
        +postCount: 0
        +postCommentCount: 0
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582735 {#4953
          date: 2024-10-22 09:38:55.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
        +entries: Doctrine\ORM\PersistentCollection {#4966 …}
        +posts: Doctrine\ORM\PersistentCollection {#4968 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
        +bans: Doctrine\ORM\PersistentCollection {#4972 …}
        +reports: Doctrine\ORM\PersistentCollection {#4974 …}
        +badges: Doctrine\ORM\PersistentCollection {#4976 …}
        +logs: Doctrine\ORM\PersistentCollection {#4978 …}
        +awards: Doctrine\ORM\PersistentCollection {#4980 …}
        +categories: Doctrine\ORM\PersistentCollection {#4982 …}
        -id: 120
        +apId: "selfhosted@lemmy.world"
        +apProfileId: "https://lemmy.world/c/selfhosted"
        +apPublicUrl: "https://lemmy.world/c/selfhosted"
        +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
        +apInboxUrl: "https://lemmy.world/inbox"
        +apDomain: "lemmy.world"
        +apPreferredUsername: "selfhosted"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1703473826 {#4950
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1703473826 {#4952
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#4882 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#4883 …}
      +slug: "Stalwart-v0-5-0"
      +title: "Stalwart v0.5.0"
      +url: "https://stalw.art/blog/storage-performance/"
      +body: """
        **Elevating Performance and Flexibility**\n
        \n
        We are excited to announce the release of Stalwart Mail Server v0.5.0. As we approach the end of the year, this significant update marks a major advancement in our journey to provide a robust, efficient, and versatile mail server solution. This latest version incorporates a range of performance enhancements, storage layer improvements, and new features, designed to elevate your email server experience.
        """
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 40
      +favouriteCount: 119
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1720677469 {#4875
        date: 2024-07-11 07:57:49.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#4884 …}
      +votes: Doctrine\ORM\PersistentCollection {#4886 …}
      +reports: Doctrine\ORM\PersistentCollection {#4888 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4890 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4892 …}
      +badges: Doctrine\ORM\PersistentCollection {#4894 …}
      +children: []
      -id: 25264
      -titleTs: "'stalwart':1 'v0.5.0':2"
      -bodyTs: "'advanc':31 'announc':9 'approach':19 'design':60 'effici':39 'elev':1,62 'email':64 'end':21 'enhanc':53 'excit':7 'experi':66 'featur':59 'flexibl':4 'improv':56 'incorpor':48 'journey':34 'latest':46 'layer':55 'mail':14,42 'major':30 'mark':28 'new':58 'perform':2,52 'provid':36 'rang':50 'releas':11 'robust':38 'server':15,43,65 'signific':26 'solut':44 'stalwart':13 'storag':54 'updat':27 'v0.5.0':16 'versatil':41 'version':47 'year':24"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1703792857
      +visibility: "visible             "
      +apId: "https://lemmy.world/post/10034802"
      +editedAt: DateTimeImmutable @1708508842 {#4872
        date: 2024-02-21 10:47:22.0 +01:00
      }
      +createdAt: DateTimeImmutable @1703706457 {#4874
        date: 2023-12-27 20:47:37.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2138 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2129 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2130 …}
    +body: """
      I don’t think it’s you, it generally is a bad practice to have multiple processes inside a container. It usually defeats most of the isolation, introduces problems with handling zombie processes (therefore you need an init) and restarting tools when they crash (then you need something like supervisord, which I guess this image might use - I didn’t check). Each software adds dependencies, which can conflict (again defeating the idea of containers), and of course CVEs. Then you have a problem with users etc.\n
      \n
      So yeah, containers are generally not meant to be used this way. The project might be cool but I would be very uncomfortable running it like this, especially if that’s going to be my primary email, with all the password resetting capabilities etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1703756461 {#2349
      date: 2023-12-28 10:41:01.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Parachute4196@lemmy.world"
      "@eskuero@lemmy.fromshado.ws"
      "@ikidd@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2094 …}
    +nested: Doctrine\ORM\PersistentCollection {#2093 …}
    +votes: Doctrine\ORM\PersistentCollection {#2086 …}
    +reports: Doctrine\ORM\PersistentCollection {#2087 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2088 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2064 …}
    -id: 258804
    -bodyTs: "'add':64 'bad':12 'capabl':129 'check':61 'conflict':68 'contain':20,74,89 'cool':103 'cours':77 'crash':44 'cves':78 'defeat':23,70 'depend':65 'didn':59 'email':123 'especi':114 'etc':86,130 'general':9,91 'go':118 'guess':53 'handl':31 'idea':72 'imag':55 'init':38 'insid':18 'introduc':28 'isol':27 'like':49,112 'meant':93 'might':56,101 'multipl':16 'need':36,47 'password':127 'practic':13 'primari':122 'problem':29,83 'process':17,33 'project':100 'reset':128 'restart':40 'run':110 'softwar':63 'someth':48 'supervisord':50 'therefor':34 'think':4 'tool':41 'uncomfort':109 'use':57,96 'user':85 'usual':22 'way':98 'would':106 'yeah':88 'zombi':32"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6274200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703756461 {#2331
      date: 2023-12-28 10:41:01.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\VoteComponent {#5284
  +subject: App\Entity\EntryComment {#2351
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2141
      +user: Proxies\__CG__\App\Entity\User {#4880 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
        +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
        +name: "selfhosted@lemmy.world"
        +title: "selfhosted"
        +description: """
          A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
          \n
          Rules:\n
          \n
          - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
          - No spam posting.\n
          - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
          - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
          - No trolling.\n
          \n
          Resources:\n
          \n
          - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
          - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
          - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
          \n
          > Any issues on the community? Report it using the report flag.\n
          \n
          > Questions? DM the mods!
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 222
        +entryCommentCount: 3916
        +postCount: 0
        +postCommentCount: 0
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582735 {#4953
          date: 2024-10-22 09:38:55.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
        +entries: Doctrine\ORM\PersistentCollection {#4966 …}
        +posts: Doctrine\ORM\PersistentCollection {#4968 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
        +bans: Doctrine\ORM\PersistentCollection {#4972 …}
        +reports: Doctrine\ORM\PersistentCollection {#4974 …}
        +badges: Doctrine\ORM\PersistentCollection {#4976 …}
        +logs: Doctrine\ORM\PersistentCollection {#4978 …}
        +awards: Doctrine\ORM\PersistentCollection {#4980 …}
        +categories: Doctrine\ORM\PersistentCollection {#4982 …}
        -id: 120
        +apId: "selfhosted@lemmy.world"
        +apProfileId: "https://lemmy.world/c/selfhosted"
        +apPublicUrl: "https://lemmy.world/c/selfhosted"
        +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
        +apInboxUrl: "https://lemmy.world/inbox"
        +apDomain: "lemmy.world"
        +apPreferredUsername: "selfhosted"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1703473826 {#4950
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1703473826 {#4952
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#4882 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#4883 …}
      +slug: "Stalwart-v0-5-0"
      +title: "Stalwart v0.5.0"
      +url: "https://stalw.art/blog/storage-performance/"
      +body: """
        **Elevating Performance and Flexibility**\n
        \n
        We are excited to announce the release of Stalwart Mail Server v0.5.0. As we approach the end of the year, this significant update marks a major advancement in our journey to provide a robust, efficient, and versatile mail server solution. This latest version incorporates a range of performance enhancements, storage layer improvements, and new features, designed to elevate your email server experience.
        """
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 40
      +favouriteCount: 119
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1720677469 {#4875
        date: 2024-07-11 07:57:49.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#4884 …}
      +votes: Doctrine\ORM\PersistentCollection {#4886 …}
      +reports: Doctrine\ORM\PersistentCollection {#4888 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4890 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4892 …}
      +badges: Doctrine\ORM\PersistentCollection {#4894 …}
      +children: []
      -id: 25264
      -titleTs: "'stalwart':1 'v0.5.0':2"
      -bodyTs: "'advanc':31 'announc':9 'approach':19 'design':60 'effici':39 'elev':1,62 'email':64 'end':21 'enhanc':53 'excit':7 'experi':66 'featur':59 'flexibl':4 'improv':56 'incorpor':48 'journey':34 'latest':46 'layer':55 'mail':14,42 'major':30 'mark':28 'new':58 'perform':2,52 'provid':36 'rang':50 'releas':11 'robust':38 'server':15,43,65 'signific':26 'solut':44 'stalwart':13 'storag':54 'updat':27 'v0.5.0':16 'versatil':41 'version':47 'year':24"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1703792857
      +visibility: "visible             "
      +apId: "https://lemmy.world/post/10034802"
      +editedAt: DateTimeImmutable @1708508842 {#4872
        date: 2024-02-21 10:47:22.0 +01:00
      }
      +createdAt: DateTimeImmutable @1703706457 {#4874
        date: 2023-12-27 20:47:37.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2138 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2129 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2130 …}
    +body: """
      I don’t think it’s you, it generally is a bad practice to have multiple processes inside a container. It usually defeats most of the isolation, introduces problems with handling zombie processes (therefore you need an init) and restarting tools when they crash (then you need something like supervisord, which I guess this image might use - I didn’t check). Each software adds dependencies, which can conflict (again defeating the idea of containers), and of course CVEs. Then you have a problem with users etc.\n
      \n
      So yeah, containers are generally not meant to be used this way. The project might be cool but I would be very uncomfortable running it like this, especially if that’s going to be my primary email, with all the password resetting capabilities etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1703756461 {#2349
      date: 2023-12-28 10:41:01.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Parachute4196@lemmy.world"
      "@eskuero@lemmy.fromshado.ws"
      "@ikidd@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2094 …}
    +nested: Doctrine\ORM\PersistentCollection {#2093 …}
    +votes: Doctrine\ORM\PersistentCollection {#2086 …}
    +reports: Doctrine\ORM\PersistentCollection {#2087 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2088 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2064 …}
    -id: 258804
    -bodyTs: "'add':64 'bad':12 'capabl':129 'check':61 'conflict':68 'contain':20,74,89 'cool':103 'cours':77 'crash':44 'cves':78 'defeat':23,70 'depend':65 'didn':59 'email':123 'especi':114 'etc':86,130 'general':9,91 'go':118 'guess':53 'handl':31 'idea':72 'imag':55 'init':38 'insid':18 'introduc':28 'isol':27 'like':49,112 'meant':93 'might':56,101 'multipl':16 'need':36,47 'password':127 'practic':13 'primari':122 'problem':29,83 'process':17,33 'project':100 'reset':128 'restart':40 'run':110 'softwar':63 'someth':48 'supervisord':50 'therefor':34 'think':4 'tool':41 'uncomfort':109 'use':57,96 'user':85 'usual':22 'way':98 'would':106 'yeah':88 'zombi':32"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6274200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703756461 {#2331
      date: 2023-12-28 10:41:01.0 +01:00
    }
  }
  +formDest: "entry_comment"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
boost App\Twig\Components\BoostComponent 12.0 MiB 5.07 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2351
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2141
      +user: Proxies\__CG__\App\Entity\User {#4880 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
        +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
        +name: "selfhosted@lemmy.world"
        +title: "selfhosted"
        +description: """
          A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
          \n
          Rules:\n
          \n
          - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
          - No spam posting.\n
          - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
          - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
          - No trolling.\n
          \n
          Resources:\n
          \n
          - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
          - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
          - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
          \n
          > Any issues on the community? Report it using the report flag.\n
          \n
          > Questions? DM the mods!
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 222
        +entryCommentCount: 3916
        +postCount: 0
        +postCommentCount: 0
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582735 {#4953
          date: 2024-10-22 09:38:55.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
        +entries: Doctrine\ORM\PersistentCollection {#4966 …}
        +posts: Doctrine\ORM\PersistentCollection {#4968 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
        +bans: Doctrine\ORM\PersistentCollection {#4972 …}
        +reports: Doctrine\ORM\PersistentCollection {#4974 …}
        +badges: Doctrine\ORM\PersistentCollection {#4976 …}
        +logs: Doctrine\ORM\PersistentCollection {#4978 …}
        +awards: Doctrine\ORM\PersistentCollection {#4980 …}
        +categories: Doctrine\ORM\PersistentCollection {#4982 …}
        -id: 120
        +apId: "selfhosted@lemmy.world"
        +apProfileId: "https://lemmy.world/c/selfhosted"
        +apPublicUrl: "https://lemmy.world/c/selfhosted"
        +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
        +apInboxUrl: "https://lemmy.world/inbox"
        +apDomain: "lemmy.world"
        +apPreferredUsername: "selfhosted"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1703473826 {#4950
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1703473826 {#4952
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#4882 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#4883 …}
      +slug: "Stalwart-v0-5-0"
      +title: "Stalwart v0.5.0"
      +url: "https://stalw.art/blog/storage-performance/"
      +body: """
        **Elevating Performance and Flexibility**\n
        \n
        We are excited to announce the release of Stalwart Mail Server v0.5.0. As we approach the end of the year, this significant update marks a major advancement in our journey to provide a robust, efficient, and versatile mail server solution. This latest version incorporates a range of performance enhancements, storage layer improvements, and new features, designed to elevate your email server experience.
        """
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 40
      +favouriteCount: 119
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1720677469 {#4875
        date: 2024-07-11 07:57:49.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#4884 …}
      +votes: Doctrine\ORM\PersistentCollection {#4886 …}
      +reports: Doctrine\ORM\PersistentCollection {#4888 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4890 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4892 …}
      +badges: Doctrine\ORM\PersistentCollection {#4894 …}
      +children: []
      -id: 25264
      -titleTs: "'stalwart':1 'v0.5.0':2"
      -bodyTs: "'advanc':31 'announc':9 'approach':19 'design':60 'effici':39 'elev':1,62 'email':64 'end':21 'enhanc':53 'excit':7 'experi':66 'featur':59 'flexibl':4 'improv':56 'incorpor':48 'journey':34 'latest':46 'layer':55 'mail':14,42 'major':30 'mark':28 'new':58 'perform':2,52 'provid':36 'rang':50 'releas':11 'robust':38 'server':15,43,65 'signific':26 'solut':44 'stalwart':13 'storag':54 'updat':27 'v0.5.0':16 'versatil':41 'version':47 'year':24"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1703792857
      +visibility: "visible             "
      +apId: "https://lemmy.world/post/10034802"
      +editedAt: DateTimeImmutable @1708508842 {#4872
        date: 2024-02-21 10:47:22.0 +01:00
      }
      +createdAt: DateTimeImmutable @1703706457 {#4874
        date: 2023-12-27 20:47:37.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2138 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2129 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2130 …}
    +body: """
      I don’t think it’s you, it generally is a bad practice to have multiple processes inside a container. It usually defeats most of the isolation, introduces problems with handling zombie processes (therefore you need an init) and restarting tools when they crash (then you need something like supervisord, which I guess this image might use - I didn’t check). Each software adds dependencies, which can conflict (again defeating the idea of containers), and of course CVEs. Then you have a problem with users etc.\n
      \n
      So yeah, containers are generally not meant to be used this way. The project might be cool but I would be very uncomfortable running it like this, especially if that’s going to be my primary email, with all the password resetting capabilities etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1703756461 {#2349
      date: 2023-12-28 10:41:01.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Parachute4196@lemmy.world"
      "@eskuero@lemmy.fromshado.ws"
      "@ikidd@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2094 …}
    +nested: Doctrine\ORM\PersistentCollection {#2093 …}
    +votes: Doctrine\ORM\PersistentCollection {#2086 …}
    +reports: Doctrine\ORM\PersistentCollection {#2087 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2088 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2064 …}
    -id: 258804
    -bodyTs: "'add':64 'bad':12 'capabl':129 'check':61 'conflict':68 'contain':20,74,89 'cool':103 'cours':77 'crash':44 'cves':78 'defeat':23,70 'depend':65 'didn':59 'email':123 'especi':114 'etc':86,130 'general':9,91 'go':118 'guess':53 'handl':31 'idea':72 'imag':55 'init':38 'insid':18 'introduc':28 'isol':27 'like':49,112 'meant':93 'might':56,101 'multipl':16 'need':36,47 'password':127 'practic':13 'primari':122 'problem':29,83 'process':17,33 'project':100 'reset':128 'restart':40 'run':110 'softwar':63 'someth':48 'supervisord':50 'therefor':34 'think':4 'tool':41 'uncomfort':109 'use':57,96 'user':85 'usual':22 'way':98 'would':106 'yeah':88 'zombi':32"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6274200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703756461 {#2331
      date: 2023-12-28 10:41:01.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\BoostComponent {#5341
  +formDest: "entry_comment"
  +subject: App\Entity\EntryComment {#2351
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2141
      +user: Proxies\__CG__\App\Entity\User {#4880 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2138
        +icon: Proxies\__CG__\App\Entity\Image {#4958 …}
        +name: "selfhosted@lemmy.world"
        +title: "selfhosted"
        +description: """
          A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
          \n
          Rules:\n
          \n
          - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
          - No spam posting.\n
          - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
          - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
          - No trolling.\n
          \n
          Resources:\n
          \n
          - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
          - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
          - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
          \n
          > Any issues on the community? Report it using the report flag.\n
          \n
          > Questions? DM the mods!
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 222
        +entryCommentCount: 3916
        +postCount: 0
        +postCommentCount: 0
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582735 {#4953
          date: 2024-10-22 09:38:55.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#4960 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#4962 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#4964 …}
        +entries: Doctrine\ORM\PersistentCollection {#4966 …}
        +posts: Doctrine\ORM\PersistentCollection {#4968 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#4970 …}
        +bans: Doctrine\ORM\PersistentCollection {#4972 …}
        +reports: Doctrine\ORM\PersistentCollection {#4974 …}
        +badges: Doctrine\ORM\PersistentCollection {#4976 …}
        +logs: Doctrine\ORM\PersistentCollection {#4978 …}
        +awards: Doctrine\ORM\PersistentCollection {#4980 …}
        +categories: Doctrine\ORM\PersistentCollection {#4982 …}
        -id: 120
        +apId: "selfhosted@lemmy.world"
        +apProfileId: "https://lemmy.world/c/selfhosted"
        +apPublicUrl: "https://lemmy.world/c/selfhosted"
        +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
        +apInboxUrl: "https://lemmy.world/inbox"
        +apDomain: "lemmy.world"
        +apPreferredUsername: "selfhosted"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1703473826 {#4950
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1703473826 {#4952
          date: 2023-12-25 04:10:26.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#4882 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#4883 …}
      +slug: "Stalwart-v0-5-0"
      +title: "Stalwart v0.5.0"
      +url: "https://stalw.art/blog/storage-performance/"
      +body: """
        **Elevating Performance and Flexibility**\n
        \n
        We are excited to announce the release of Stalwart Mail Server v0.5.0. As we approach the end of the year, this significant update marks a major advancement in our journey to provide a robust, efficient, and versatile mail server solution. This latest version incorporates a range of performance enhancements, storage layer improvements, and new features, designed to elevate your email server experience.
        """
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 40
      +favouriteCount: 119
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1720677469 {#4875
        date: 2024-07-11 07:57:49.0 +02:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#4884 …}
      +votes: Doctrine\ORM\PersistentCollection {#4886 …}
      +reports: Doctrine\ORM\PersistentCollection {#4888 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4890 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4892 …}
      +badges: Doctrine\ORM\PersistentCollection {#4894 …}
      +children: []
      -id: 25264
      -titleTs: "'stalwart':1 'v0.5.0':2"
      -bodyTs: "'advanc':31 'announc':9 'approach':19 'design':60 'effici':39 'elev':1,62 'email':64 'end':21 'enhanc':53 'excit':7 'experi':66 'featur':59 'flexibl':4 'improv':56 'incorpor':48 'journey':34 'latest':46 'layer':55 'mail':14,42 'major':30 'mark':28 'new':58 'perform':2,52 'provid':36 'rang':50 'releas':11 'robust':38 'server':15,43,65 'signific':26 'solut':44 'stalwart':13 'storag':54 'updat':27 'v0.5.0':16 'versatil':41 'version':47 'year':24"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1703792857
      +visibility: "visible             "
      +apId: "https://lemmy.world/post/10034802"
      +editedAt: DateTimeImmutable @1708508842 {#4872
        date: 2024-02-21 10:47:22.0 +01:00
      }
      +createdAt: DateTimeImmutable @1703706457 {#4874
        date: 2023-12-27 20:47:37.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2138 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2129 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2130 …}
    +body: """
      I don’t think it’s you, it generally is a bad practice to have multiple processes inside a container. It usually defeats most of the isolation, introduces problems with handling zombie processes (therefore you need an init) and restarting tools when they crash (then you need something like supervisord, which I guess this image might use - I didn’t check). Each software adds dependencies, which can conflict (again defeating the idea of containers), and of course CVEs. Then you have a problem with users etc.\n
      \n
      So yeah, containers are generally not meant to be used this way. The project might be cool but I would be very uncomfortable running it like this, especially if that’s going to be my primary email, with all the password resetting capabilities etc.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 7
    +score: 0
    +lastActive: DateTime @1703756461 {#2349
      date: 2023-12-28 10:41:01.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Parachute4196@lemmy.world"
      "@eskuero@lemmy.fromshado.ws"
      "@ikidd@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2094 …}
    +nested: Doctrine\ORM\PersistentCollection {#2093 …}
    +votes: Doctrine\ORM\PersistentCollection {#2086 …}
    +reports: Doctrine\ORM\PersistentCollection {#2087 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2088 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2064 …}
    -id: 258804
    -bodyTs: "'add':64 'bad':12 'capabl':129 'check':61 'conflict':68 'contain':20,74,89 'cool':103 'cours':77 'crash':44 'cves':78 'defeat':23,70 'depend':65 'didn':59 'email':123 'especi':114 'etc':86,130 'general':9,91 'go':118 'guess':53 'handl':31 'idea':72 'imag':55 'init':38 'insid':18 'introduc':28 'isol':27 'like':49,112 'meant':93 'might':56,101 'multipl':16 'need':36,47 'password':127 'practic':13 'primari':122 'problem':29,83 'process':17,33 'project':100 'reset':128 'restart':40 'run':110 'softwar':63 'someth':48 'supervisord':50 'therefor':34 'think':4 'tool':41 'uncomfort':109 'use':57,96 'user':85 'usual':22 'way':98 'would':106 'yeah':88 'zombi':32"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6274200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703756461 {#2331
      date: 2023-12-28 10:41:01.0 +01:00
    }
  }
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
entry_comment App\Twig\Components\EntryCommentComponent 12.0 MiB 7.80 ms
Input props
[
  "comment" => App\Entity\EntryComment {#2077
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2081
      +user: Proxies\__CG__\App\Entity\User {#5627 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
        +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
        +name: "privacy@lemmy.ml"
        +title: "privacy"
        +description: """
          A place to discuss privacy and freedom in the digital world.\n
          ============================================================\n
          \n
          Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
          \n
          In this community everyone is welcome to post links and discuss topics related to privacy.\n
          \n
          ### Some Rules\n
          \n
          - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
          - Don’t promote proprietary software\n
          - Try to keep things on topic\n
          - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
          - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
          - Be nice :)\n
          \n
          ### Related communities\n
          \n
          - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
          - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
          - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
          - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
          \n
          ### Chat rooms\n
          \n
          - [Matrix/Element]Dead\n
          - [Discord](https://discord.gg/8xfrVjvngh)\n
          \n
          much thanks to @gary_host_laptop for the logo design :)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 561
        +entryCommentCount: 7684
        +postCount: 6
        +postCommentCount: 73
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582580 {#5701
          date: 2024-10-22 09:36:20.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
        +entries: Doctrine\ORM\PersistentCollection {#5711 …}
        +posts: Doctrine\ORM\PersistentCollection {#5713 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
        +bans: Doctrine\ORM\PersistentCollection {#5717 …}
        +reports: Doctrine\ORM\PersistentCollection {#5719 …}
        +badges: Doctrine\ORM\PersistentCollection {#5721 …}
        +logs: Doctrine\ORM\PersistentCollection {#5723 …}
        +awards: Doctrine\ORM\PersistentCollection {#5725 …}
        +categories: Doctrine\ORM\PersistentCollection {#5727 …}
        -id: 85
        +apId: "privacy@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/privacy"
        +apPublicUrl: "https://lemmy.ml/c/privacy"
        +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "privacy"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583592 {#5702
          date: 2024-10-22 09:53:12.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1699780272 {#5703
          date: 2023-11-12 10:11:12.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#5633 …}
      +slug: "Proton-Drive-Camera-Backup-has-Arrived"
      +title: "Proton Drive Camera Backup has Arrived!"
      +url: "https://proton.me/support/enable-photo-backup"
      +body: "This has been one of the key features I’ve been waiting for to finally be able to move away from Google Photos and OneDrive for mobile photos backup."
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 9
      +favouriteCount: 107
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1702185373 {#5628
        date: 2023-12-10 06:16:13.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#5635 …}
      +votes: Doctrine\ORM\PersistentCollection {#5637 …}
      +reports: Doctrine\ORM\PersistentCollection {#5639 …}
      +favourites: Doctrine\ORM\PersistentCollection {#5641 …}
      +notifications: Doctrine\ORM\PersistentCollection {#5643 …}
      +badges: Doctrine\ORM\PersistentCollection {#5645 …}
      +children: []
      -id: 21188
      -titleTs: "'arriv':6 'backup':4 'camera':3 'drive':2 'proton':1"
      -bodyTs: "'abl':17 'away':20 'backup':29 'featur':8 'final':15 'googl':22 'key':7 'mobil':27 'move':19 'one':4 'onedr':25 'photo':23,28 've':10 'wait':12"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1702132508
      +visibility: "visible             "
      +apId: "https://lemmy.ca/post/10899393"
      +editedAt: null
      +createdAt: DateTimeImmutable @1702046108 {#5625
        date: 2023-12-08 15:35:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2343 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Thanks for sharing, I was not aware of it, and it worked like a charm."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1702054271 {#2040
      date: 2023-12-08 17:51:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@OminousOrange@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2337 …}
    +nested: Doctrine\ORM\PersistentCollection {#2335 …}
    +votes: Doctrine\ORM\PersistentCollection {#2338 …}
    +reports: Doctrine\ORM\PersistentCollection {#2143 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2073 …}
    -id: 211123
    -bodyTs: "'awar':7 'charm':15 'like':13 'share':3 'thank':1 'work':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5899794"
    +editedAt: null
    +createdAt: DateTimeImmutable @1702054271 {#2133
      date: 2023-12-08 17:51:11.0 +01:00
    }
  }
  "showNested" => false
  "dateAsUrl" => true
  "showMagazineName" => true
  "showEntryTitle" => true
]
Attributes
[]
Component
App\Twig\Components\EntryCommentComponent {#5590
  +comment: App\Entity\EntryComment {#2077
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2081
      +user: Proxies\__CG__\App\Entity\User {#5627 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
        +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
        +name: "privacy@lemmy.ml"
        +title: "privacy"
        +description: """
          A place to discuss privacy and freedom in the digital world.\n
          ============================================================\n
          \n
          Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
          \n
          In this community everyone is welcome to post links and discuss topics related to privacy.\n
          \n
          ### Some Rules\n
          \n
          - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
          - Don’t promote proprietary software\n
          - Try to keep things on topic\n
          - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
          - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
          - Be nice :)\n
          \n
          ### Related communities\n
          \n
          - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
          - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
          - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
          - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
          \n
          ### Chat rooms\n
          \n
          - [Matrix/Element]Dead\n
          - [Discord](https://discord.gg/8xfrVjvngh)\n
          \n
          much thanks to @gary_host_laptop for the logo design :)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 561
        +entryCommentCount: 7684
        +postCount: 6
        +postCommentCount: 73
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582580 {#5701
          date: 2024-10-22 09:36:20.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
        +entries: Doctrine\ORM\PersistentCollection {#5711 …}
        +posts: Doctrine\ORM\PersistentCollection {#5713 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
        +bans: Doctrine\ORM\PersistentCollection {#5717 …}
        +reports: Doctrine\ORM\PersistentCollection {#5719 …}
        +badges: Doctrine\ORM\PersistentCollection {#5721 …}
        +logs: Doctrine\ORM\PersistentCollection {#5723 …}
        +awards: Doctrine\ORM\PersistentCollection {#5725 …}
        +categories: Doctrine\ORM\PersistentCollection {#5727 …}
        -id: 85
        +apId: "privacy@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/privacy"
        +apPublicUrl: "https://lemmy.ml/c/privacy"
        +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "privacy"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583592 {#5702
          date: 2024-10-22 09:53:12.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1699780272 {#5703
          date: 2023-11-12 10:11:12.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#5633 …}
      +slug: "Proton-Drive-Camera-Backup-has-Arrived"
      +title: "Proton Drive Camera Backup has Arrived!"
      +url: "https://proton.me/support/enable-photo-backup"
      +body: "This has been one of the key features I’ve been waiting for to finally be able to move away from Google Photos and OneDrive for mobile photos backup."
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 9
      +favouriteCount: 107
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1702185373 {#5628
        date: 2023-12-10 06:16:13.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#5635 …}
      +votes: Doctrine\ORM\PersistentCollection {#5637 …}
      +reports: Doctrine\ORM\PersistentCollection {#5639 …}
      +favourites: Doctrine\ORM\PersistentCollection {#5641 …}
      +notifications: Doctrine\ORM\PersistentCollection {#5643 …}
      +badges: Doctrine\ORM\PersistentCollection {#5645 …}
      +children: []
      -id: 21188
      -titleTs: "'arriv':6 'backup':4 'camera':3 'drive':2 'proton':1"
      -bodyTs: "'abl':17 'away':20 'backup':29 'featur':8 'final':15 'googl':22 'key':7 'mobil':27 'move':19 'one':4 'onedr':25 'photo':23,28 've':10 'wait':12"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1702132508
      +visibility: "visible             "
      +apId: "https://lemmy.ca/post/10899393"
      +editedAt: null
      +createdAt: DateTimeImmutable @1702046108 {#5625
        date: 2023-12-08 15:35:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2343 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Thanks for sharing, I was not aware of it, and it worked like a charm."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1702054271 {#2040
      date: 2023-12-08 17:51:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@OminousOrange@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2337 …}
    +nested: Doctrine\ORM\PersistentCollection {#2335 …}
    +votes: Doctrine\ORM\PersistentCollection {#2338 …}
    +reports: Doctrine\ORM\PersistentCollection {#2143 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2073 …}
    -id: 211123
    -bodyTs: "'awar':7 'charm':15 'like':13 'share':3 'thank':1 'work':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5899794"
    +editedAt: null
    +createdAt: DateTimeImmutable @1702054271 {#2133
      date: 2023-12-08 17:51:11.0 +01:00
    }
  }
  +showMagazineName: true
  +showEntryTitle: true
  +showNested: false
  +level: 1
  +canSeeTrash: false
  +dateAsUrl: true
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
}
user_inline App\Twig\Components\UserInlineComponent 12.0 MiB 0.18 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "showAvatar" => false
]
Attributes
[]
Component
App\Twig\Components\UserInlineComponent {#5654
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +showAvatar: false
}
date App\Twig\Components\DateComponent 12.0 MiB 0.15 ms
Input props
[
  "date" => DateTimeImmutable @1702054271 {#2133
    date: 2023-12-08 17:51:11.0 +01:00
  }
]
Attributes
[]
Component
App\Twig\Components\DateComponent {#5739
  +date: DateTimeImmutable @1702054271 {#2133
    date: 2023-12-08 17:51:11.0 +01:00
  }
}
date_edited App\Twig\Components\DateEditedComponent 12.0 MiB 0.09 ms
Input props
[
  "createdAt" => DateTimeImmutable @1702054271 {#2133
    date: 2023-12-08 17:51:11.0 +01:00
  }
  "editedAt" => null
]
Attributes
[]
Component
App\Twig\Components\DateEditedComponent {#5793
  +createdAt: DateTimeImmutable @1702054271 {#2133
    date: 2023-12-08 17:51:11.0 +01:00
  }
  +editedAt: null
}
magazine_inline App\Twig\Components\MagazineInlineComponent 12.0 MiB 0.13 ms
Input props
[
  "magazine" => Proxies\__CG__\App\Entity\Magazine {#2343
    +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#5701
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
    +entries: Doctrine\ORM\PersistentCollection {#5711 …}
    +posts: Doctrine\ORM\PersistentCollection {#5713 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
    +bans: Doctrine\ORM\PersistentCollection {#5717 …}
    +reports: Doctrine\ORM\PersistentCollection {#5719 …}
    +badges: Doctrine\ORM\PersistentCollection {#5721 …}
    +logs: Doctrine\ORM\PersistentCollection {#5723 …}
    +awards: Doctrine\ORM\PersistentCollection {#5725 …}
    +categories: Doctrine\ORM\PersistentCollection {#5727 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#5702
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#5703
      date: 2023-11-12 10:11:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\MagazineInlineComponent {#5847
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
    +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#5701
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
    +entries: Doctrine\ORM\PersistentCollection {#5711 …}
    +posts: Doctrine\ORM\PersistentCollection {#5713 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
    +bans: Doctrine\ORM\PersistentCollection {#5717 …}
    +reports: Doctrine\ORM\PersistentCollection {#5719 …}
    +badges: Doctrine\ORM\PersistentCollection {#5721 …}
    +logs: Doctrine\ORM\PersistentCollection {#5723 …}
    +awards: Doctrine\ORM\PersistentCollection {#5725 …}
    +categories: Doctrine\ORM\PersistentCollection {#5727 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#5702
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#5703
      date: 2023-11-12 10:11:12.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showTitle: true
  +fullName: false
  +stretchedLink: false
  +showAvatar: false
}
entry_inline App\Twig\Components\EntryInlineComponent 12.0 MiB 0.18 ms
Input props
[
  "entry" => Proxies\__CG__\App\Entity\Entry {#2081
    +user: Proxies\__CG__\App\Entity\User {#5627 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
      +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
      +name: "privacy@lemmy.ml"
      +title: "privacy"
      +description: """
        A place to discuss privacy and freedom in the digital world.\n
        ============================================================\n
        \n
        Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
        \n
        In this community everyone is welcome to post links and discuss topics related to privacy.\n
        \n
        ### Some Rules\n
        \n
        - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
        - Don’t promote proprietary software\n
        - Try to keep things on topic\n
        - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
        - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
        - Be nice :)\n
        \n
        ### Related communities\n
        \n
        - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
        - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
        - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
        - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
        \n
        ### Chat rooms\n
        \n
        - [Matrix/Element]Dead\n
        - [Discord](https://discord.gg/8xfrVjvngh)\n
        \n
        much thanks to @gary_host_laptop for the logo design :)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 561
      +entryCommentCount: 7684
      +postCount: 6
      +postCommentCount: 73
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582580 {#5701
        date: 2024-10-22 09:36:20.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
      +entries: Doctrine\ORM\PersistentCollection {#5711 …}
      +posts: Doctrine\ORM\PersistentCollection {#5713 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
      +bans: Doctrine\ORM\PersistentCollection {#5717 …}
      +reports: Doctrine\ORM\PersistentCollection {#5719 …}
      +badges: Doctrine\ORM\PersistentCollection {#5721 …}
      +logs: Doctrine\ORM\PersistentCollection {#5723 …}
      +awards: Doctrine\ORM\PersistentCollection {#5725 …}
      +categories: Doctrine\ORM\PersistentCollection {#5727 …}
      -id: 85
      +apId: "privacy@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/privacy"
      +apPublicUrl: "https://lemmy.ml/c/privacy"
      +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "privacy"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583592 {#5702
        date: 2024-10-22 09:53:12.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699780272 {#5703
        date: 2023-11-12 10:11:12.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#5633 …}
    +slug: "Proton-Drive-Camera-Backup-has-Arrived"
    +title: "Proton Drive Camera Backup has Arrived!"
    +url: "https://proton.me/support/enable-photo-backup"
    +body: "This has been one of the key features I’ve been waiting for to finally be able to move away from Google Photos and OneDrive for mobile photos backup."
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 9
    +favouriteCount: 107
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1702185373 {#5628
      date: 2023-12-10 06:16:13.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#5635 …}
    +votes: Doctrine\ORM\PersistentCollection {#5637 …}
    +reports: Doctrine\ORM\PersistentCollection {#5639 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5641 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5643 …}
    +badges: Doctrine\ORM\PersistentCollection {#5645 …}
    +children: []
    -id: 21188
    -titleTs: "'arriv':6 'backup':4 'camera':3 'drive':2 'proton':1"
    -bodyTs: "'abl':17 'away':20 'backup':29 'featur':8 'final':15 'googl':22 'key':7 'mobil':27 'move':19 'one':4 'onedr':25 'photo':23,28 've':10 'wait':12"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1702132508
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/10899393"
    +editedAt: null
    +createdAt: DateTimeImmutable @1702046108 {#5625
      date: 2023-12-08 15:35:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\EntryInlineComponent {#5902
  +entry: Proxies\__CG__\App\Entity\Entry {#2081
    +user: Proxies\__CG__\App\Entity\User {#5627 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
      +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
      +name: "privacy@lemmy.ml"
      +title: "privacy"
      +description: """
        A place to discuss privacy and freedom in the digital world.\n
        ============================================================\n
        \n
        Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
        \n
        In this community everyone is welcome to post links and discuss topics related to privacy.\n
        \n
        ### Some Rules\n
        \n
        - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
        - Don’t promote proprietary software\n
        - Try to keep things on topic\n
        - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
        - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
        - Be nice :)\n
        \n
        ### Related communities\n
        \n
        - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
        - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
        - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
        - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
        \n
        ### Chat rooms\n
        \n
        - [Matrix/Element]Dead\n
        - [Discord](https://discord.gg/8xfrVjvngh)\n
        \n
        much thanks to @gary_host_laptop for the logo design :)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 561
      +entryCommentCount: 7684
      +postCount: 6
      +postCommentCount: 73
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582580 {#5701
        date: 2024-10-22 09:36:20.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
      +entries: Doctrine\ORM\PersistentCollection {#5711 …}
      +posts: Doctrine\ORM\PersistentCollection {#5713 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
      +bans: Doctrine\ORM\PersistentCollection {#5717 …}
      +reports: Doctrine\ORM\PersistentCollection {#5719 …}
      +badges: Doctrine\ORM\PersistentCollection {#5721 …}
      +logs: Doctrine\ORM\PersistentCollection {#5723 …}
      +awards: Doctrine\ORM\PersistentCollection {#5725 …}
      +categories: Doctrine\ORM\PersistentCollection {#5727 …}
      -id: 85
      +apId: "privacy@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/privacy"
      +apPublicUrl: "https://lemmy.ml/c/privacy"
      +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "privacy"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583592 {#5702
        date: 2024-10-22 09:53:12.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699780272 {#5703
        date: 2023-11-12 10:11:12.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#5633 …}
    +slug: "Proton-Drive-Camera-Backup-has-Arrived"
    +title: "Proton Drive Camera Backup has Arrived!"
    +url: "https://proton.me/support/enable-photo-backup"
    +body: "This has been one of the key features I’ve been waiting for to finally be able to move away from Google Photos and OneDrive for mobile photos backup."
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 9
    +favouriteCount: 107
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1702185373 {#5628
      date: 2023-12-10 06:16:13.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#5635 …}
    +votes: Doctrine\ORM\PersistentCollection {#5637 …}
    +reports: Doctrine\ORM\PersistentCollection {#5639 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5641 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5643 …}
    +badges: Doctrine\ORM\PersistentCollection {#5645 …}
    +children: []
    -id: 21188
    -titleTs: "'arriv':6 'backup':4 'camera':3 'drive':2 'proton':1"
    -bodyTs: "'abl':17 'away':20 'backup':29 'featur':8 'final':15 'googl':22 'key':7 'mobil':27 'move':19 'one':4 'onedr':25 'photo':23,28 've':10 'wait':12"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1702132508
    +visibility: "visible             "
    +apId: "https://lemmy.ca/post/10899393"
    +editedAt: null
    +createdAt: DateTimeImmutable @1702046108 {#5625
      date: 2023-12-08 15:35:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
}
user_avatar App\Twig\Components\UserAvatarComponent 12.0 MiB 0.13 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "width" => 40
  "height" => 40
  "asLink" => true
]
Attributes
[]
Component
App\Twig\Components\UserAvatarComponent {#5957
  +width: 40
  +height: 40
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +asLink: true
}
vote App\Twig\Components\VoteComponent 12.0 MiB 0.41 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2077
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2081
      +user: Proxies\__CG__\App\Entity\User {#5627 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
        +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
        +name: "privacy@lemmy.ml"
        +title: "privacy"
        +description: """
          A place to discuss privacy and freedom in the digital world.\n
          ============================================================\n
          \n
          Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
          \n
          In this community everyone is welcome to post links and discuss topics related to privacy.\n
          \n
          ### Some Rules\n
          \n
          - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
          - Don’t promote proprietary software\n
          - Try to keep things on topic\n
          - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
          - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
          - Be nice :)\n
          \n
          ### Related communities\n
          \n
          - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
          - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
          - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
          - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
          \n
          ### Chat rooms\n
          \n
          - [Matrix/Element]Dead\n
          - [Discord](https://discord.gg/8xfrVjvngh)\n
          \n
          much thanks to @gary_host_laptop for the logo design :)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 561
        +entryCommentCount: 7684
        +postCount: 6
        +postCommentCount: 73
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582580 {#5701
          date: 2024-10-22 09:36:20.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
        +entries: Doctrine\ORM\PersistentCollection {#5711 …}
        +posts: Doctrine\ORM\PersistentCollection {#5713 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
        +bans: Doctrine\ORM\PersistentCollection {#5717 …}
        +reports: Doctrine\ORM\PersistentCollection {#5719 …}
        +badges: Doctrine\ORM\PersistentCollection {#5721 …}
        +logs: Doctrine\ORM\PersistentCollection {#5723 …}
        +awards: Doctrine\ORM\PersistentCollection {#5725 …}
        +categories: Doctrine\ORM\PersistentCollection {#5727 …}
        -id: 85
        +apId: "privacy@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/privacy"
        +apPublicUrl: "https://lemmy.ml/c/privacy"
        +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "privacy"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583592 {#5702
          date: 2024-10-22 09:53:12.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1699780272 {#5703
          date: 2023-11-12 10:11:12.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#5633 …}
      +slug: "Proton-Drive-Camera-Backup-has-Arrived"
      +title: "Proton Drive Camera Backup has Arrived!"
      +url: "https://proton.me/support/enable-photo-backup"
      +body: "This has been one of the key features I’ve been waiting for to finally be able to move away from Google Photos and OneDrive for mobile photos backup."
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 9
      +favouriteCount: 107
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1702185373 {#5628
        date: 2023-12-10 06:16:13.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#5635 …}
      +votes: Doctrine\ORM\PersistentCollection {#5637 …}
      +reports: Doctrine\ORM\PersistentCollection {#5639 …}
      +favourites: Doctrine\ORM\PersistentCollection {#5641 …}
      +notifications: Doctrine\ORM\PersistentCollection {#5643 …}
      +badges: Doctrine\ORM\PersistentCollection {#5645 …}
      +children: []
      -id: 21188
      -titleTs: "'arriv':6 'backup':4 'camera':3 'drive':2 'proton':1"
      -bodyTs: "'abl':17 'away':20 'backup':29 'featur':8 'final':15 'googl':22 'key':7 'mobil':27 'move':19 'one':4 'onedr':25 'photo':23,28 've':10 'wait':12"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1702132508
      +visibility: "visible             "
      +apId: "https://lemmy.ca/post/10899393"
      +editedAt: null
      +createdAt: DateTimeImmutable @1702046108 {#5625
        date: 2023-12-08 15:35:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2343 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Thanks for sharing, I was not aware of it, and it worked like a charm."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1702054271 {#2040
      date: 2023-12-08 17:51:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@OminousOrange@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2337 …}
    +nested: Doctrine\ORM\PersistentCollection {#2335 …}
    +votes: Doctrine\ORM\PersistentCollection {#2338 …}
    +reports: Doctrine\ORM\PersistentCollection {#2143 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2073 …}
    -id: 211123
    -bodyTs: "'awar':7 'charm':15 'like':13 'share':3 'thank':1 'work':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5899794"
    +editedAt: null
    +createdAt: DateTimeImmutable @1702054271 {#2133
      date: 2023-12-08 17:51:11.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\VoteComponent {#6026
  +subject: App\Entity\EntryComment {#2077
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2081
      +user: Proxies\__CG__\App\Entity\User {#5627 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
        +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
        +name: "privacy@lemmy.ml"
        +title: "privacy"
        +description: """
          A place to discuss privacy and freedom in the digital world.\n
          ============================================================\n
          \n
          Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
          \n
          In this community everyone is welcome to post links and discuss topics related to privacy.\n
          \n
          ### Some Rules\n
          \n
          - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
          - Don’t promote proprietary software\n
          - Try to keep things on topic\n
          - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
          - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
          - Be nice :)\n
          \n
          ### Related communities\n
          \n
          - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
          - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
          - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
          - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
          \n
          ### Chat rooms\n
          \n
          - [Matrix/Element]Dead\n
          - [Discord](https://discord.gg/8xfrVjvngh)\n
          \n
          much thanks to @gary_host_laptop for the logo design :)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 561
        +entryCommentCount: 7684
        +postCount: 6
        +postCommentCount: 73
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582580 {#5701
          date: 2024-10-22 09:36:20.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
        +entries: Doctrine\ORM\PersistentCollection {#5711 …}
        +posts: Doctrine\ORM\PersistentCollection {#5713 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
        +bans: Doctrine\ORM\PersistentCollection {#5717 …}
        +reports: Doctrine\ORM\PersistentCollection {#5719 …}
        +badges: Doctrine\ORM\PersistentCollection {#5721 …}
        +logs: Doctrine\ORM\PersistentCollection {#5723 …}
        +awards: Doctrine\ORM\PersistentCollection {#5725 …}
        +categories: Doctrine\ORM\PersistentCollection {#5727 …}
        -id: 85
        +apId: "privacy@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/privacy"
        +apPublicUrl: "https://lemmy.ml/c/privacy"
        +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "privacy"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583592 {#5702
          date: 2024-10-22 09:53:12.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1699780272 {#5703
          date: 2023-11-12 10:11:12.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#5633 …}
      +slug: "Proton-Drive-Camera-Backup-has-Arrived"
      +title: "Proton Drive Camera Backup has Arrived!"
      +url: "https://proton.me/support/enable-photo-backup"
      +body: "This has been one of the key features I’ve been waiting for to finally be able to move away from Google Photos and OneDrive for mobile photos backup."
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 9
      +favouriteCount: 107
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1702185373 {#5628
        date: 2023-12-10 06:16:13.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#5635 …}
      +votes: Doctrine\ORM\PersistentCollection {#5637 …}
      +reports: Doctrine\ORM\PersistentCollection {#5639 …}
      +favourites: Doctrine\ORM\PersistentCollection {#5641 …}
      +notifications: Doctrine\ORM\PersistentCollection {#5643 …}
      +badges: Doctrine\ORM\PersistentCollection {#5645 …}
      +children: []
      -id: 21188
      -titleTs: "'arriv':6 'backup':4 'camera':3 'drive':2 'proton':1"
      -bodyTs: "'abl':17 'away':20 'backup':29 'featur':8 'final':15 'googl':22 'key':7 'mobil':27 'move':19 'one':4 'onedr':25 'photo':23,28 've':10 'wait':12"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1702132508
      +visibility: "visible             "
      +apId: "https://lemmy.ca/post/10899393"
      +editedAt: null
      +createdAt: DateTimeImmutable @1702046108 {#5625
        date: 2023-12-08 15:35:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2343 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Thanks for sharing, I was not aware of it, and it worked like a charm."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1702054271 {#2040
      date: 2023-12-08 17:51:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@OminousOrange@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2337 …}
    +nested: Doctrine\ORM\PersistentCollection {#2335 …}
    +votes: Doctrine\ORM\PersistentCollection {#2338 …}
    +reports: Doctrine\ORM\PersistentCollection {#2143 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2073 …}
    -id: 211123
    -bodyTs: "'awar':7 'charm':15 'like':13 'share':3 'thank':1 'work':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5899794"
    +editedAt: null
    +createdAt: DateTimeImmutable @1702054271 {#2133
      date: 2023-12-08 17:51:11.0 +01:00
    }
  }
  +formDest: "entry_comment"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
boost App\Twig\Components\BoostComponent 12.0 MiB 0.62 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2077
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2081
      +user: Proxies\__CG__\App\Entity\User {#5627 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
        +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
        +name: "privacy@lemmy.ml"
        +title: "privacy"
        +description: """
          A place to discuss privacy and freedom in the digital world.\n
          ============================================================\n
          \n
          Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
          \n
          In this community everyone is welcome to post links and discuss topics related to privacy.\n
          \n
          ### Some Rules\n
          \n
          - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
          - Don’t promote proprietary software\n
          - Try to keep things on topic\n
          - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
          - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
          - Be nice :)\n
          \n
          ### Related communities\n
          \n
          - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
          - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
          - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
          - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
          \n
          ### Chat rooms\n
          \n
          - [Matrix/Element]Dead\n
          - [Discord](https://discord.gg/8xfrVjvngh)\n
          \n
          much thanks to @gary_host_laptop for the logo design :)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 561
        +entryCommentCount: 7684
        +postCount: 6
        +postCommentCount: 73
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582580 {#5701
          date: 2024-10-22 09:36:20.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
        +entries: Doctrine\ORM\PersistentCollection {#5711 …}
        +posts: Doctrine\ORM\PersistentCollection {#5713 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
        +bans: Doctrine\ORM\PersistentCollection {#5717 …}
        +reports: Doctrine\ORM\PersistentCollection {#5719 …}
        +badges: Doctrine\ORM\PersistentCollection {#5721 …}
        +logs: Doctrine\ORM\PersistentCollection {#5723 …}
        +awards: Doctrine\ORM\PersistentCollection {#5725 …}
        +categories: Doctrine\ORM\PersistentCollection {#5727 …}
        -id: 85
        +apId: "privacy@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/privacy"
        +apPublicUrl: "https://lemmy.ml/c/privacy"
        +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "privacy"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583592 {#5702
          date: 2024-10-22 09:53:12.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1699780272 {#5703
          date: 2023-11-12 10:11:12.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#5633 …}
      +slug: "Proton-Drive-Camera-Backup-has-Arrived"
      +title: "Proton Drive Camera Backup has Arrived!"
      +url: "https://proton.me/support/enable-photo-backup"
      +body: "This has been one of the key features I’ve been waiting for to finally be able to move away from Google Photos and OneDrive for mobile photos backup."
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 9
      +favouriteCount: 107
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1702185373 {#5628
        date: 2023-12-10 06:16:13.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#5635 …}
      +votes: Doctrine\ORM\PersistentCollection {#5637 …}
      +reports: Doctrine\ORM\PersistentCollection {#5639 …}
      +favourites: Doctrine\ORM\PersistentCollection {#5641 …}
      +notifications: Doctrine\ORM\PersistentCollection {#5643 …}
      +badges: Doctrine\ORM\PersistentCollection {#5645 …}
      +children: []
      -id: 21188
      -titleTs: "'arriv':6 'backup':4 'camera':3 'drive':2 'proton':1"
      -bodyTs: "'abl':17 'away':20 'backup':29 'featur':8 'final':15 'googl':22 'key':7 'mobil':27 'move':19 'one':4 'onedr':25 'photo':23,28 've':10 'wait':12"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1702132508
      +visibility: "visible             "
      +apId: "https://lemmy.ca/post/10899393"
      +editedAt: null
      +createdAt: DateTimeImmutable @1702046108 {#5625
        date: 2023-12-08 15:35:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2343 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Thanks for sharing, I was not aware of it, and it worked like a charm."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1702054271 {#2040
      date: 2023-12-08 17:51:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@OminousOrange@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2337 …}
    +nested: Doctrine\ORM\PersistentCollection {#2335 …}
    +votes: Doctrine\ORM\PersistentCollection {#2338 …}
    +reports: Doctrine\ORM\PersistentCollection {#2143 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2073 …}
    -id: 211123
    -bodyTs: "'awar':7 'charm':15 'like':13 'share':3 'thank':1 'work':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5899794"
    +editedAt: null
    +createdAt: DateTimeImmutable @1702054271 {#2133
      date: 2023-12-08 17:51:11.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\BoostComponent {#6083
  +formDest: "entry_comment"
  +subject: App\Entity\EntryComment {#2077
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2081
      +user: Proxies\__CG__\App\Entity\User {#5627 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2343
        +icon: Proxies\__CG__\App\Entity\Image {#5704 …}
        +name: "privacy@lemmy.ml"
        +title: "privacy"
        +description: """
          A place to discuss privacy and freedom in the digital world.\n
          ============================================================\n
          \n
          Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
          \n
          In this community everyone is welcome to post links and discuss topics related to privacy.\n
          \n
          ### Some Rules\n
          \n
          - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
          - Don’t promote proprietary software\n
          - Try to keep things on topic\n
          - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
          - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
          - Be nice :)\n
          \n
          ### Related communities\n
          \n
          - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
          - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
          - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
          - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
          \n
          ### Chat rooms\n
          \n
          - [Matrix/Element]Dead\n
          - [Discord](https://discord.gg/8xfrVjvngh)\n
          \n
          much thanks to @gary_host_laptop for the logo design :)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 561
        +entryCommentCount: 7684
        +postCount: 6
        +postCommentCount: 73
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729582580 {#5701
          date: 2024-10-22 09:36:20.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#5705 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#5707 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#5709 …}
        +entries: Doctrine\ORM\PersistentCollection {#5711 …}
        +posts: Doctrine\ORM\PersistentCollection {#5713 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#5715 …}
        +bans: Doctrine\ORM\PersistentCollection {#5717 …}
        +reports: Doctrine\ORM\PersistentCollection {#5719 …}
        +badges: Doctrine\ORM\PersistentCollection {#5721 …}
        +logs: Doctrine\ORM\PersistentCollection {#5723 …}
        +awards: Doctrine\ORM\PersistentCollection {#5725 …}
        +categories: Doctrine\ORM\PersistentCollection {#5727 …}
        -id: 85
        +apId: "privacy@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/privacy"
        +apPublicUrl: "https://lemmy.ml/c/privacy"
        +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "privacy"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583592 {#5702
          date: 2024-10-22 09:53:12.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1699780272 {#5703
          date: 2023-11-12 10:11:12.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: null
      +domain: Proxies\__CG__\App\Entity\Domain {#5633 …}
      +slug: "Proton-Drive-Camera-Backup-has-Arrived"
      +title: "Proton Drive Camera Backup has Arrived!"
      +url: "https://proton.me/support/enable-photo-backup"
      +body: "This has been one of the key features I’ve been waiting for to finally be able to move away from Google Photos and OneDrive for mobile photos backup."
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 9
      +favouriteCount: 107
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1702185373 {#5628
        date: 2023-12-10 06:16:13.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#5635 …}
      +votes: Doctrine\ORM\PersistentCollection {#5637 …}
      +reports: Doctrine\ORM\PersistentCollection {#5639 …}
      +favourites: Doctrine\ORM\PersistentCollection {#5641 …}
      +notifications: Doctrine\ORM\PersistentCollection {#5643 …}
      +badges: Doctrine\ORM\PersistentCollection {#5645 …}
      +children: []
      -id: 21188
      -titleTs: "'arriv':6 'backup':4 'camera':3 'drive':2 'proton':1"
      -bodyTs: "'abl':17 'away':20 'backup':29 'featur':8 'final':15 'googl':22 'key':7 'mobil':27 'move':19 'one':4 'onedr':25 'photo':23,28 've':10 'wait':12"
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1702132508
      +visibility: "visible             "
      +apId: "https://lemmy.ca/post/10899393"
      +editedAt: null
      +createdAt: DateTimeImmutable @1702046108 {#5625
        date: 2023-12-08 15:35:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2343 …2}
    +image: null
    +parent: null
    +root: null
    +body: "Thanks for sharing, I was not aware of it, and it worked like a charm."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1702054271 {#2040
      date: 2023-12-08 17:51:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@OminousOrange@lemmy.ca"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2337 …}
    +nested: Doctrine\ORM\PersistentCollection {#2335 …}
    +votes: Doctrine\ORM\PersistentCollection {#2338 …}
    +reports: Doctrine\ORM\PersistentCollection {#2143 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2073 …}
    -id: 211123
    -bodyTs: "'awar':7 'charm':15 'like':13 'share':3 'thank':1 'work':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5899794"
    +editedAt: null
    +createdAt: DateTimeImmutable @1702054271 {#2133
      date: 2023-12-08 17:51:11.0 +01:00
    }
  }
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
entry_comment App\Twig\Components\EntryCommentComponent 12.0 MiB 17.15 ms
Input props
[
  "comment" => App\Entity\EntryComment {#2065
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2074
      +user: Proxies\__CG__\App\Entity\User {#6369 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#6375 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#6377 …}
      +slug: "7-Ways-to-Tweak-Sudo-Command-in-Linux"
      +title: "7 Ways to Tweak Sudo Command in Linux"
      +url: "https://itsfoss.com/sudo-tips/"
      +body: null
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 20
      +favouriteCount: 61
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1701904582 {#6370
        date: 2023-12-07 00:16:22.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#6378 …}
      +votes: Doctrine\ORM\PersistentCollection {#6380 …}
      +reports: Doctrine\ORM\PersistentCollection {#6382 …}
      +favourites: Doctrine\ORM\PersistentCollection {#6384 …}
      +notifications: Doctrine\ORM\PersistentCollection {#6386 …}
      +badges: Doctrine\ORM\PersistentCollection {#6388 …}
      +children: []
      -id: 20409
      -titleTs: "'7':1 'command':6 'linux':8 'sudo':5 'tweak':4 'way':2"
      -bodyTs: null
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1701888483
      +visibility: "visible             "
      +apId: "https://discuss.tchncs.de/post/7337171"
      +editedAt: null
      +createdAt: DateTimeImmutable @1701802083 {#6367
        date: 2023-12-05 19:48:03.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2066 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
    +body: """
      If you containerize, the application (malware) will run under the user configured in the image, unless you override it, and in a separate mount namespace, unless you change that, which makes the “alias sudo” trick extremely unlikely.\n
      \n
      Even running under a separate user anyway prevents almost fully the attack you mention, unless the separate user has root privileges or the DAC_OVERRIDE capability is assigned to the binary (assigning it requires CAP_SYS_ADMIN).\n
      \n
      In short, the attack you mention is a common persistence and privilege escalation vector, which is relatively easy to detect (watch for changes to shell profiles), although preventing it requires some care. I just want to point out that in single-user machines (e.g. personal computers) escalating to root is anyway fairly unnecessary, given that all the juicy stuff (ssh keys, data, etc.) is anyway probably running under/owned by that user.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1701900436 {#2098
      date: 2023-12-06 23:07:16.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@petsoi@discuss.tchncs.de"
      "@Pantherina@feddit.de"
      "@digdilem@lemmy.ml"
      "@IAm_A_Complete_Idiot@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2067 …}
    +nested: Doctrine\ORM\PersistentCollection {#2049 …}
    +votes: Doctrine\ORM\PersistentCollection {#2051 …}
    +reports: Doctrine\ORM\PersistentCollection {#2059 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2047 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2057 …}
    -id: 204267
    -bodyTs: "'admin':74 'alia':33 'almost':46 'although':101 'anyway':44,126,140 'applic':5 'assign':65,69 'attack':49,78 'binari':68 'cap':72 'capabl':63 'care':106 'chang':28,97 'common':83 'comput':121 'configur':12 'container':3 'dac':61 'data':137 'detect':94 'e.g':119 'easi':92 'escal':87,122 'etc':138 'even':38 'extrem':36 'fair':127 'fulli':47 'given':129 'imag':15 'juici':133 'key':136 'machin':118 'make':31 'malwar':6 'mention':51,80 'mount':24 'namespac':25 'overrid':18,62 'persist':84 'person':120 'point':111 'prevent':45,102 'privileg':58,86 'probabl':141 'profil':100 'relat':91 'requir':71,104 'root':57,124 'run':8,39,142 'separ':23,42,54 'shell':99 'short':76 'singl':116 'single-us':115 'ssh':135 'stuff':134 'sudo':34 'sys':73 'trick':35 'under/owned':143 'unless':16,26,52 'unlik':37 'unnecessari':128 'user':11,43,55,117,146 'vector':88 'want':109 'watch':95"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5856485"
    +editedAt: null
    +createdAt: DateTimeImmutable @1701900436 {#2063
      date: 2023-12-06 23:07:16.0 +01:00
    }
  }
  "showNested" => false
  "dateAsUrl" => true
  "showMagazineName" => true
  "showEntryTitle" => true
]
Attributes
[]
Component
App\Twig\Components\EntryCommentComponent {#6332
  +comment: App\Entity\EntryComment {#2065
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2074
      +user: Proxies\__CG__\App\Entity\User {#6369 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#6375 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#6377 …}
      +slug: "7-Ways-to-Tweak-Sudo-Command-in-Linux"
      +title: "7 Ways to Tweak Sudo Command in Linux"
      +url: "https://itsfoss.com/sudo-tips/"
      +body: null
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 20
      +favouriteCount: 61
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1701904582 {#6370
        date: 2023-12-07 00:16:22.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#6378 …}
      +votes: Doctrine\ORM\PersistentCollection {#6380 …}
      +reports: Doctrine\ORM\PersistentCollection {#6382 …}
      +favourites: Doctrine\ORM\PersistentCollection {#6384 …}
      +notifications: Doctrine\ORM\PersistentCollection {#6386 …}
      +badges: Doctrine\ORM\PersistentCollection {#6388 …}
      +children: []
      -id: 20409
      -titleTs: "'7':1 'command':6 'linux':8 'sudo':5 'tweak':4 'way':2"
      -bodyTs: null
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1701888483
      +visibility: "visible             "
      +apId: "https://discuss.tchncs.de/post/7337171"
      +editedAt: null
      +createdAt: DateTimeImmutable @1701802083 {#6367
        date: 2023-12-05 19:48:03.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2066 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
    +body: """
      If you containerize, the application (malware) will run under the user configured in the image, unless you override it, and in a separate mount namespace, unless you change that, which makes the “alias sudo” trick extremely unlikely.\n
      \n
      Even running under a separate user anyway prevents almost fully the attack you mention, unless the separate user has root privileges or the DAC_OVERRIDE capability is assigned to the binary (assigning it requires CAP_SYS_ADMIN).\n
      \n
      In short, the attack you mention is a common persistence and privilege escalation vector, which is relatively easy to detect (watch for changes to shell profiles), although preventing it requires some care. I just want to point out that in single-user machines (e.g. personal computers) escalating to root is anyway fairly unnecessary, given that all the juicy stuff (ssh keys, data, etc.) is anyway probably running under/owned by that user.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1701900436 {#2098
      date: 2023-12-06 23:07:16.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@petsoi@discuss.tchncs.de"
      "@Pantherina@feddit.de"
      "@digdilem@lemmy.ml"
      "@IAm_A_Complete_Idiot@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2067 …}
    +nested: Doctrine\ORM\PersistentCollection {#2049 …}
    +votes: Doctrine\ORM\PersistentCollection {#2051 …}
    +reports: Doctrine\ORM\PersistentCollection {#2059 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2047 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2057 …}
    -id: 204267
    -bodyTs: "'admin':74 'alia':33 'almost':46 'although':101 'anyway':44,126,140 'applic':5 'assign':65,69 'attack':49,78 'binari':68 'cap':72 'capabl':63 'care':106 'chang':28,97 'common':83 'comput':121 'configur':12 'container':3 'dac':61 'data':137 'detect':94 'e.g':119 'easi':92 'escal':87,122 'etc':138 'even':38 'extrem':36 'fair':127 'fulli':47 'given':129 'imag':15 'juici':133 'key':136 'machin':118 'make':31 'malwar':6 'mention':51,80 'mount':24 'namespac':25 'overrid':18,62 'persist':84 'person':120 'point':111 'prevent':45,102 'privileg':58,86 'probabl':141 'profil':100 'relat':91 'requir':71,104 'root':57,124 'run':8,39,142 'separ':23,42,54 'shell':99 'short':76 'singl':116 'single-us':115 'ssh':135 'stuff':134 'sudo':34 'sys':73 'trick':35 'under/owned':143 'unless':16,26,52 'unlik':37 'unnecessari':128 'user':11,43,55,117,146 'vector':88 'want':109 'watch':95"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5856485"
    +editedAt: null
    +createdAt: DateTimeImmutable @1701900436 {#2063
      date: 2023-12-06 23:07:16.0 +01:00
    }
  }
  +showMagazineName: true
  +showEntryTitle: true
  +showNested: false
  +level: 1
  +canSeeTrash: false
  +dateAsUrl: true
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
}
user_inline App\Twig\Components\UserInlineComponent 12.0 MiB 0.15 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "showAvatar" => false
]
Attributes
[]
Component
App\Twig\Components\UserInlineComponent {#6397
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +showAvatar: false
}
date App\Twig\Components\DateComponent 12.0 MiB 0.14 ms
Input props
[
  "date" => DateTimeImmutable @1701900436 {#2063
    date: 2023-12-06 23:07:16.0 +01:00
  }
]
Attributes
[]
Component
App\Twig\Components\DateComponent {#6453
  +date: DateTimeImmutable @1701900436 {#2063
    date: 2023-12-06 23:07:16.0 +01:00
  }
}
date_edited App\Twig\Components\DateEditedComponent 12.0 MiB 0.09 ms
Input props
[
  "createdAt" => DateTimeImmutable @1701900436 {#2063
    date: 2023-12-06 23:07:16.0 +01:00
  }
  "editedAt" => null
]
Attributes
[]
Component
App\Twig\Components\DateEditedComponent {#6507
  +createdAt: DateTimeImmutable @1701900436 {#2063
    date: 2023-12-06 23:07:16.0 +01:00
  }
  +editedAt: null
}
magazine_inline App\Twig\Components\MagazineInlineComponent 12.0 MiB 0.12 ms
Input props
[
  "magazine" => Proxies\__CG__\App\Entity\Magazine {#2384
    +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#2565
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
    +entries: Doctrine\ORM\PersistentCollection {#2589 …}
    +posts: Doctrine\ORM\PersistentCollection {#2592 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
    +bans: Doctrine\ORM\PersistentCollection {#2600 …}
    +reports: Doctrine\ORM\PersistentCollection {#2608 …}
    +badges: Doctrine\ORM\PersistentCollection {#2621 …}
    +logs: Doctrine\ORM\PersistentCollection {#2631 …}
    +awards: Doctrine\ORM\PersistentCollection {#2613 …}
    +categories: Doctrine\ORM\PersistentCollection {#2637 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#2566
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#2567
      date: 2023-11-02 13:51:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\MagazineInlineComponent {#6561
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
    +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#2565
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
    +entries: Doctrine\ORM\PersistentCollection {#2589 …}
    +posts: Doctrine\ORM\PersistentCollection {#2592 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
    +bans: Doctrine\ORM\PersistentCollection {#2600 …}
    +reports: Doctrine\ORM\PersistentCollection {#2608 …}
    +badges: Doctrine\ORM\PersistentCollection {#2621 …}
    +logs: Doctrine\ORM\PersistentCollection {#2631 …}
    +awards: Doctrine\ORM\PersistentCollection {#2613 …}
    +categories: Doctrine\ORM\PersistentCollection {#2637 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#2566
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#2567
      date: 2023-11-02 13:51:08.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showTitle: true
  +fullName: false
  +stretchedLink: false
  +showAvatar: false
}
entry_inline App\Twig\Components\EntryInlineComponent 12.0 MiB 0.16 ms
Input props
[
  "entry" => Proxies\__CG__\App\Entity\Entry {#2074
    +user: Proxies\__CG__\App\Entity\User {#6369 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
      +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#2565
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
      +entries: Doctrine\ORM\PersistentCollection {#2589 …}
      +posts: Doctrine\ORM\PersistentCollection {#2592 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
      +bans: Doctrine\ORM\PersistentCollection {#2600 …}
      +reports: Doctrine\ORM\PersistentCollection {#2608 …}
      +badges: Doctrine\ORM\PersistentCollection {#2621 …}
      +logs: Doctrine\ORM\PersistentCollection {#2631 …}
      +awards: Doctrine\ORM\PersistentCollection {#2613 …}
      +categories: Doctrine\ORM\PersistentCollection {#2637 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#2566
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#2567
        date: 2023-11-02 13:51:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: Proxies\__CG__\App\Entity\Image {#6375 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#6377 …}
    +slug: "7-Ways-to-Tweak-Sudo-Command-in-Linux"
    +title: "7 Ways to Tweak Sudo Command in Linux"
    +url: "https://itsfoss.com/sudo-tips/"
    +body: null
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 61
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1701904582 {#6370
      date: 2023-12-07 00:16:22.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#6378 …}
    +votes: Doctrine\ORM\PersistentCollection {#6380 …}
    +reports: Doctrine\ORM\PersistentCollection {#6382 …}
    +favourites: Doctrine\ORM\PersistentCollection {#6384 …}
    +notifications: Doctrine\ORM\PersistentCollection {#6386 …}
    +badges: Doctrine\ORM\PersistentCollection {#6388 …}
    +children: []
    -id: 20409
    -titleTs: "'7':1 'command':6 'linux':8 'sudo':5 'tweak':4 'way':2"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1701888483
    +visibility: "visible             "
    +apId: "https://discuss.tchncs.de/post/7337171"
    +editedAt: null
    +createdAt: DateTimeImmutable @1701802083 {#6367
      date: 2023-12-05 19:48:03.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]
Attributes
[]
Component
App\Twig\Components\EntryInlineComponent {#6616
  +entry: Proxies\__CG__\App\Entity\Entry {#2074
    +user: Proxies\__CG__\App\Entity\User {#6369 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
      +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#2565
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
      +entries: Doctrine\ORM\PersistentCollection {#2589 …}
      +posts: Doctrine\ORM\PersistentCollection {#2592 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
      +bans: Doctrine\ORM\PersistentCollection {#2600 …}
      +reports: Doctrine\ORM\PersistentCollection {#2608 …}
      +badges: Doctrine\ORM\PersistentCollection {#2621 …}
      +logs: Doctrine\ORM\PersistentCollection {#2631 …}
      +awards: Doctrine\ORM\PersistentCollection {#2613 …}
      +categories: Doctrine\ORM\PersistentCollection {#2637 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#2566
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#2567
        date: 2023-11-02 13:51:08.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: Proxies\__CG__\App\Entity\Image {#6375 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#6377 …}
    +slug: "7-Ways-to-Tweak-Sudo-Command-in-Linux"
    +title: "7 Ways to Tweak Sudo Command in Linux"
    +url: "https://itsfoss.com/sudo-tips/"
    +body: null
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 61
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1701904582 {#6370
      date: 2023-12-07 00:16:22.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#6378 …}
    +votes: Doctrine\ORM\PersistentCollection {#6380 …}
    +reports: Doctrine\ORM\PersistentCollection {#6382 …}
    +favourites: Doctrine\ORM\PersistentCollection {#6384 …}
    +notifications: Doctrine\ORM\PersistentCollection {#6386 …}
    +badges: Doctrine\ORM\PersistentCollection {#6388 …}
    +children: []
    -id: 20409
    -titleTs: "'7':1 'command':6 'linux':8 'sudo':5 'tweak':4 'way':2"
    -bodyTs: null
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1701888483
    +visibility: "visible             "
    +apId: "https://discuss.tchncs.de/post/7337171"
    +editedAt: null
    +createdAt: DateTimeImmutable @1701802083 {#6367
      date: 2023-12-05 19:48:03.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
}
user_avatar App\Twig\Components\UserAvatarComponent 12.0 MiB 0.13 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  "width" => 40
  "height" => 40
  "asLink" => true
]
Attributes
[]
Component
App\Twig\Components\UserAvatarComponent {#6671
  +width: 40
  +height: 40
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
  +asLink: true
}
vote App\Twig\Components\VoteComponent 12.0 MiB 0.36 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2065
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2074
      +user: Proxies\__CG__\App\Entity\User {#6369 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#6375 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#6377 …}
      +slug: "7-Ways-to-Tweak-Sudo-Command-in-Linux"
      +title: "7 Ways to Tweak Sudo Command in Linux"
      +url: "https://itsfoss.com/sudo-tips/"
      +body: null
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 20
      +favouriteCount: 61
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1701904582 {#6370
        date: 2023-12-07 00:16:22.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#6378 …}
      +votes: Doctrine\ORM\PersistentCollection {#6380 …}
      +reports: Doctrine\ORM\PersistentCollection {#6382 …}
      +favourites: Doctrine\ORM\PersistentCollection {#6384 …}
      +notifications: Doctrine\ORM\PersistentCollection {#6386 …}
      +badges: Doctrine\ORM\PersistentCollection {#6388 …}
      +children: []
      -id: 20409
      -titleTs: "'7':1 'command':6 'linux':8 'sudo':5 'tweak':4 'way':2"
      -bodyTs: null
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1701888483
      +visibility: "visible             "
      +apId: "https://discuss.tchncs.de/post/7337171"
      +editedAt: null
      +createdAt: DateTimeImmutable @1701802083 {#6367
        date: 2023-12-05 19:48:03.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2066 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
    +body: """
      If you containerize, the application (malware) will run under the user configured in the image, unless you override it, and in a separate mount namespace, unless you change that, which makes the “alias sudo” trick extremely unlikely.\n
      \n
      Even running under a separate user anyway prevents almost fully the attack you mention, unless the separate user has root privileges or the DAC_OVERRIDE capability is assigned to the binary (assigning it requires CAP_SYS_ADMIN).\n
      \n
      In short, the attack you mention is a common persistence and privilege escalation vector, which is relatively easy to detect (watch for changes to shell profiles), although preventing it requires some care. I just want to point out that in single-user machines (e.g. personal computers) escalating to root is anyway fairly unnecessary, given that all the juicy stuff (ssh keys, data, etc.) is anyway probably running under/owned by that user.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1701900436 {#2098
      date: 2023-12-06 23:07:16.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@petsoi@discuss.tchncs.de"
      "@Pantherina@feddit.de"
      "@digdilem@lemmy.ml"
      "@IAm_A_Complete_Idiot@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2067 …}
    +nested: Doctrine\ORM\PersistentCollection {#2049 …}
    +votes: Doctrine\ORM\PersistentCollection {#2051 …}
    +reports: Doctrine\ORM\PersistentCollection {#2059 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2047 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2057 …}
    -id: 204267
    -bodyTs: "'admin':74 'alia':33 'almost':46 'although':101 'anyway':44,126,140 'applic':5 'assign':65,69 'attack':49,78 'binari':68 'cap':72 'capabl':63 'care':106 'chang':28,97 'common':83 'comput':121 'configur':12 'container':3 'dac':61 'data':137 'detect':94 'e.g':119 'easi':92 'escal':87,122 'etc':138 'even':38 'extrem':36 'fair':127 'fulli':47 'given':129 'imag':15 'juici':133 'key':136 'machin':118 'make':31 'malwar':6 'mention':51,80 'mount':24 'namespac':25 'overrid':18,62 'persist':84 'person':120 'point':111 'prevent':45,102 'privileg':58,86 'probabl':141 'profil':100 'relat':91 'requir':71,104 'root':57,124 'run':8,39,142 'separ':23,42,54 'shell':99 'short':76 'singl':116 'single-us':115 'ssh':135 'stuff':134 'sudo':34 'sys':73 'trick':35 'under/owned':143 'unless':16,26,52 'unlik':37 'unnecessari':128 'user':11,43,55,117,146 'vector':88 'want':109 'watch':95"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5856485"
    +editedAt: null
    +createdAt: DateTimeImmutable @1701900436 {#2063
      date: 2023-12-06 23:07:16.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\VoteComponent {#6748
  +subject: App\Entity\EntryComment {#2065
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2074
      +user: Proxies\__CG__\App\Entity\User {#6369 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#6375 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#6377 …}
      +slug: "7-Ways-to-Tweak-Sudo-Command-in-Linux"
      +title: "7 Ways to Tweak Sudo Command in Linux"
      +url: "https://itsfoss.com/sudo-tips/"
      +body: null
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 20
      +favouriteCount: 61
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1701904582 {#6370
        date: 2023-12-07 00:16:22.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#6378 …}
      +votes: Doctrine\ORM\PersistentCollection {#6380 …}
      +reports: Doctrine\ORM\PersistentCollection {#6382 …}
      +favourites: Doctrine\ORM\PersistentCollection {#6384 …}
      +notifications: Doctrine\ORM\PersistentCollection {#6386 …}
      +badges: Doctrine\ORM\PersistentCollection {#6388 …}
      +children: []
      -id: 20409
      -titleTs: "'7':1 'command':6 'linux':8 'sudo':5 'tweak':4 'way':2"
      -bodyTs: null
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1701888483
      +visibility: "visible             "
      +apId: "https://discuss.tchncs.de/post/7337171"
      +editedAt: null
      +createdAt: DateTimeImmutable @1701802083 {#6367
        date: 2023-12-05 19:48:03.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2066 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
    +body: """
      If you containerize, the application (malware) will run under the user configured in the image, unless you override it, and in a separate mount namespace, unless you change that, which makes the “alias sudo” trick extremely unlikely.\n
      \n
      Even running under a separate user anyway prevents almost fully the attack you mention, unless the separate user has root privileges or the DAC_OVERRIDE capability is assigned to the binary (assigning it requires CAP_SYS_ADMIN).\n
      \n
      In short, the attack you mention is a common persistence and privilege escalation vector, which is relatively easy to detect (watch for changes to shell profiles), although preventing it requires some care. I just want to point out that in single-user machines (e.g. personal computers) escalating to root is anyway fairly unnecessary, given that all the juicy stuff (ssh keys, data, etc.) is anyway probably running under/owned by that user.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1701900436 {#2098
      date: 2023-12-06 23:07:16.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@petsoi@discuss.tchncs.de"
      "@Pantherina@feddit.de"
      "@digdilem@lemmy.ml"
      "@IAm_A_Complete_Idiot@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2067 …}
    +nested: Doctrine\ORM\PersistentCollection {#2049 …}
    +votes: Doctrine\ORM\PersistentCollection {#2051 …}
    +reports: Doctrine\ORM\PersistentCollection {#2059 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2047 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2057 …}
    -id: 204267
    -bodyTs: "'admin':74 'alia':33 'almost':46 'although':101 'anyway':44,126,140 'applic':5 'assign':65,69 'attack':49,78 'binari':68 'cap':72 'capabl':63 'care':106 'chang':28,97 'common':83 'comput':121 'configur':12 'container':3 'dac':61 'data':137 'detect':94 'e.g':119 'easi':92 'escal':87,122 'etc':138 'even':38 'extrem':36 'fair':127 'fulli':47 'given':129 'imag':15 'juici':133 'key':136 'machin':118 'make':31 'malwar':6 'mention':51,80 'mount':24 'namespac':25 'overrid':18,62 'persist':84 'person':120 'point':111 'prevent':45,102 'privileg':58,86 'probabl':141 'profil':100 'relat':91 'requir':71,104 'root':57,124 'run':8,39,142 'separ':23,42,54 'shell':99 'short':76 'singl':116 'single-us':115 'ssh':135 'stuff':134 'sudo':34 'sys':73 'trick':35 'under/owned':143 'unless':16,26,52 'unlik':37 'unnecessari':128 'user':11,43,55,117,146 'vector':88 'want':109 'watch':95"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5856485"
    +editedAt: null
    +createdAt: DateTimeImmutable @1701900436 {#2063
      date: 2023-12-06 23:07:16.0 +01:00
    }
  }
  +formDest: "entry_comment"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
boost App\Twig\Components\BoostComponent 12.0 MiB 0.62 ms
Input props
[
  "subject" => App\Entity\EntryComment {#2065
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2074
      +user: Proxies\__CG__\App\Entity\User {#6369 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#6375 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#6377 …}
      +slug: "7-Ways-to-Tweak-Sudo-Command-in-Linux"
      +title: "7 Ways to Tweak Sudo Command in Linux"
      +url: "https://itsfoss.com/sudo-tips/"
      +body: null
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 20
      +favouriteCount: 61
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1701904582 {#6370
        date: 2023-12-07 00:16:22.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#6378 …}
      +votes: Doctrine\ORM\PersistentCollection {#6380 …}
      +reports: Doctrine\ORM\PersistentCollection {#6382 …}
      +favourites: Doctrine\ORM\PersistentCollection {#6384 …}
      +notifications: Doctrine\ORM\PersistentCollection {#6386 …}
      +badges: Doctrine\ORM\PersistentCollection {#6388 …}
      +children: []
      -id: 20409
      -titleTs: "'7':1 'command':6 'linux':8 'sudo':5 'tweak':4 'way':2"
      -bodyTs: null
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1701888483
      +visibility: "visible             "
      +apId: "https://discuss.tchncs.de/post/7337171"
      +editedAt: null
      +createdAt: DateTimeImmutable @1701802083 {#6367
        date: 2023-12-05 19:48:03.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2066 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
    +body: """
      If you containerize, the application (malware) will run under the user configured in the image, unless you override it, and in a separate mount namespace, unless you change that, which makes the “alias sudo” trick extremely unlikely.\n
      \n
      Even running under a separate user anyway prevents almost fully the attack you mention, unless the separate user has root privileges or the DAC_OVERRIDE capability is assigned to the binary (assigning it requires CAP_SYS_ADMIN).\n
      \n
      In short, the attack you mention is a common persistence and privilege escalation vector, which is relatively easy to detect (watch for changes to shell profiles), although preventing it requires some care. I just want to point out that in single-user machines (e.g. personal computers) escalating to root is anyway fairly unnecessary, given that all the juicy stuff (ssh keys, data, etc.) is anyway probably running under/owned by that user.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1701900436 {#2098
      date: 2023-12-06 23:07:16.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@petsoi@discuss.tchncs.de"
      "@Pantherina@feddit.de"
      "@digdilem@lemmy.ml"
      "@IAm_A_Complete_Idiot@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2067 …}
    +nested: Doctrine\ORM\PersistentCollection {#2049 …}
    +votes: Doctrine\ORM\PersistentCollection {#2051 …}
    +reports: Doctrine\ORM\PersistentCollection {#2059 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2047 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2057 …}
    -id: 204267
    -bodyTs: "'admin':74 'alia':33 'almost':46 'although':101 'anyway':44,126,140 'applic':5 'assign':65,69 'attack':49,78 'binari':68 'cap':72 'capabl':63 'care':106 'chang':28,97 'common':83 'comput':121 'configur':12 'container':3 'dac':61 'data':137 'detect':94 'e.g':119 'easi':92 'escal':87,122 'etc':138 'even':38 'extrem':36 'fair':127 'fulli':47 'given':129 'imag':15 'juici':133 'key':136 'machin':118 'make':31 'malwar':6 'mention':51,80 'mount':24 'namespac':25 'overrid':18,62 'persist':84 'person':120 'point':111 'prevent':45,102 'privileg':58,86 'probabl':141 'profil':100 'relat':91 'requir':71,104 'root':57,124 'run':8,39,142 'separ':23,42,54 'shell':99 'short':76 'singl':116 'single-us':115 'ssh':135 'stuff':134 'sudo':34 'sys':73 'trick':35 'under/owned':143 'unless':16,26,52 'unlik':37 'unnecessari':128 'user':11,43,55,117,146 'vector':88 'want':109 'watch':95"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5856485"
    +editedAt: null
    +createdAt: DateTimeImmutable @1701900436 {#2063
      date: 2023-12-06 23:07:16.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\BoostComponent {#6805
  +formDest: "entry_comment"
  +subject: App\Entity\EntryComment {#2065
    +user: App\Entity\User {#265
      +avatar: null
      +cover: null
      +email: "sudneo@lemmy.world"
      +username: "@sudneo@lemmy.world"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728635267 {#275
        date: 2024-10-11 10:27:47.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
      +posts: Doctrine\ORM\PersistentCollection {#84 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
      +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
      +follows: Doctrine\ORM\PersistentCollection {#1917 …}
      +followers: Doctrine\ORM\PersistentCollection {#1601 …}
      +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
      +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
      +reports: Doctrine\ORM\PersistentCollection {#1791 …}
      +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
      +violations: Doctrine\ORM\PersistentCollection {#1824 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
      +awards: Doctrine\ORM\PersistentCollection {#1929 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
      +categories: Doctrine\ORM\PersistentCollection {#1880 …}
      -id: 75524
      -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
      +apId: "sudneo@lemmy.world"
      +apProfileId: "https://lemmy.world/u/sudneo"
      +apPublicUrl: "https://lemmy.world/u/sudneo"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "sudneo"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1707650003 {#269
        date: 2024-02-11 12:13:23.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699968249 {#268
        date: 2023-11-14 14:24:09.0 +01:00
      }
    }
    +entry: Proxies\__CG__\App\Entity\Entry {#2074
      +user: Proxies\__CG__\App\Entity\User {#6369 …}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#2384
        +icon: Proxies\__CG__\App\Entity\Image {#2586 …}
        +name: "linux@lemmy.ml"
        +title: "linux"
        +description: """
          From Wikipedia, the free encyclopedia\n
          \n
          Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
          \n
          Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
          \n
          ### Rules\n
          \n
          - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
          - No misinformation\n
          - No NSFW content\n
          - No hate speech, bigotry, etc\n
          \n
          ### Related Communities\n
          \n
          - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
          - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
          - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
          - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
          \n
          Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
          """
        +rules: null
        +subscriptionsCount: 1
        +entryCount: 1406
        +entryCommentCount: 28632
        +postCount: 6
        +postCommentCount: 214
        +isAdult: false
        +customCss: null
        +lastActive: DateTime @1729583542 {#2565
          date: 2024-10-22 09:52:22.0 +02:00
        }
        +markedForDeletionAt: null
        +tags: null
        +moderators: Doctrine\ORM\PersistentCollection {#2585 …}
        +ownershipRequests: Doctrine\ORM\PersistentCollection {#2583 …}
        +moderatorRequests: Doctrine\ORM\PersistentCollection {#2588 …}
        +entries: Doctrine\ORM\PersistentCollection {#2589 …}
        +posts: Doctrine\ORM\PersistentCollection {#2592 …}
        +subscriptions: Doctrine\ORM\PersistentCollection {#2594 …}
        +bans: Doctrine\ORM\PersistentCollection {#2600 …}
        +reports: Doctrine\ORM\PersistentCollection {#2608 …}
        +badges: Doctrine\ORM\PersistentCollection {#2621 …}
        +logs: Doctrine\ORM\PersistentCollection {#2631 …}
        +awards: Doctrine\ORM\PersistentCollection {#2613 …}
        +categories: Doctrine\ORM\PersistentCollection {#2637 …}
        -id: 73
        +apId: "linux@lemmy.ml"
        +apProfileId: "https://lemmy.ml/c/linux"
        +apPublicUrl: "https://lemmy.ml/c/linux"
        +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
        +apInboxUrl: "https://lemmy.ml/inbox"
        +apDomain: "lemmy.ml"
        +apPreferredUsername: "linux"
        +apDiscoverable: true
        +apManuallyApprovesFollowers: null
        +privateKey: null
        +publicKey: null
        +apFetchedAt: DateTime @1729583596 {#2566
          date: 2024-10-22 09:53:16.0 +02:00
        }
        +apDeletedAt: null
        +apTimeoutAt: null
        +visibility: "visible             "
        +createdAt: DateTimeImmutable @1698929468 {#2567
          date: 2023-11-02 13:51:08.0 +01:00
        }
        +__isInitialized__: true
         …2
      }
      +image: Proxies\__CG__\App\Entity\Image {#6375 …}
      +domain: Proxies\__CG__\App\Entity\Domain {#6377 …}
      +slug: "7-Ways-to-Tweak-Sudo-Command-in-Linux"
      +title: "7 Ways to Tweak Sudo Command in Linux"
      +url: "https://itsfoss.com/sudo-tips/"
      +body: null
      +type: "link"
      +lang: "en"
      +isOc: false
      +hasEmbed: false
      +commentCount: 20
      +favouriteCount: 61
      +score: 0
      +isAdult: false
      +sticky: false
      +lastActive: DateTime @1701904582 {#6370
        date: 2023-12-07 00:16:22.0 +01:00
      }
      +ip: null
      +adaAmount: 0
      +tags: null
      +mentions: null
      +comments: Doctrine\ORM\PersistentCollection {#6378 …}
      +votes: Doctrine\ORM\PersistentCollection {#6380 …}
      +reports: Doctrine\ORM\PersistentCollection {#6382 …}
      +favourites: Doctrine\ORM\PersistentCollection {#6384 …}
      +notifications: Doctrine\ORM\PersistentCollection {#6386 …}
      +badges: Doctrine\ORM\PersistentCollection {#6388 …}
      +children: []
      -id: 20409
      -titleTs: "'7':1 'command':6 'linux':8 'sudo':5 'tweak':4 'way':2"
      -bodyTs: null
      +cross: false
      +upVotes: 0
      +downVotes: 0
      +ranking: 1701888483
      +visibility: "visible             "
      +apId: "https://discuss.tchncs.de/post/7337171"
      +editedAt: null
      +createdAt: DateTimeImmutable @1701802083 {#6367
        date: 2023-12-05 19:48:03.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#2384 …2}
    +image: null
    +parent: Proxies\__CG__\App\Entity\EntryComment {#2066 …}
    +root: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
    +body: """
      If you containerize, the application (malware) will run under the user configured in the image, unless you override it, and in a separate mount namespace, unless you change that, which makes the “alias sudo” trick extremely unlikely.\n
      \n
      Even running under a separate user anyway prevents almost fully the attack you mention, unless the separate user has root privileges or the DAC_OVERRIDE capability is assigned to the binary (assigning it requires CAP_SYS_ADMIN).\n
      \n
      In short, the attack you mention is a common persistence and privilege escalation vector, which is relatively easy to detect (watch for changes to shell profiles), although preventing it requires some care. I just want to point out that in single-user machines (e.g. personal computers) escalating to root is anyway fairly unnecessary, given that all the juicy stuff (ssh keys, data, etc.) is anyway probably running under/owned by that user.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1701900436 {#2098
      date: 2023-12-06 23:07:16.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@petsoi@discuss.tchncs.de"
      "@Pantherina@feddit.de"
      "@digdilem@lemmy.ml"
      "@IAm_A_Complete_Idiot@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2067 …}
    +nested: Doctrine\ORM\PersistentCollection {#2049 …}
    +votes: Doctrine\ORM\PersistentCollection {#2051 …}
    +reports: Doctrine\ORM\PersistentCollection {#2059 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2047 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2057 …}
    -id: 204267
    -bodyTs: "'admin':74 'alia':33 'almost':46 'although':101 'anyway':44,126,140 'applic':5 'assign':65,69 'attack':49,78 'binari':68 'cap':72 'capabl':63 'care':106 'chang':28,97 'common':83 'comput':121 'configur':12 'container':3 'dac':61 'data':137 'detect':94 'e.g':119 'easi':92 'escal':87,122 'etc':138 'even':38 'extrem':36 'fair':127 'fulli':47 'given':129 'imag':15 'juici':133 'key':136 'machin':118 'make':31 'malwar':6 'mention':51,80 'mount':24 'namespac':25 'overrid':18,62 'persist':84 'person':120 'point':111 'prevent':45,102 'privileg':58,86 'probabl':141 'profil':100 'relat':91 'requir':71,104 'root':57,124 'run':8,39,142 'separ':23,42,54 'shell':99 'short':76 'singl':116 'single-us':115 'ssh':135 'stuff':134 'sudo':34 'sys':73 'trick':35 'under/owned':143 'unless':16,26,52 'unlik':37 'unnecessari':128 'user':11,43,55,117,146 'vector':88 'want':109 'watch':95"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5856485"
    +editedAt: null
    +createdAt: DateTimeImmutable @1701900436 {#2063
      date: 2023-12-06 23:07:16.0 +01:00
    }
  }
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}
settings_row_enum App\Twig\Components\SettingsRowEnumComponent 12.0 MiB 0.21 ms
Input props
[
  "label" => "Sidebar position"
  "settingsKey" => "KBIN_GENERAL_SIDEBAR_POSITION"
  "values" => [
    [
      "name" => "Left"
      "value" => "LEFT"
    ]
    [
      "name" => "Right"
      "value" => "RIGHT"
    ]
  ]
  "defaultValue" => "RIGHT"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowEnumComponent {#7111
  +label: "Sidebar position"
  +help: ""
  +settingsKey: "KBIN_GENERAL_SIDEBAR_POSITION"
  +values: [
    [
      "name" => "Left"
      "value" => "LEFT"
    ]
    [
      "name" => "Right"
      "value" => "RIGHT"
    ]
  ]
  +defaultValue: "RIGHT"
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.17 ms
Input props
[
  "label" => "Dynamic lists"
  "settingsKey" => "KBIN_GENERAL_DYNAMIC_LISTS"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7165
  +label: "Dynamic lists"
  +help: ""
  +settingsKey: "KBIN_GENERAL_DYNAMIC_LISTS"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.13 ms
Input props
[
  "label" => "Rounded edges"
  "settingsKey" => "KBIN_GENERAL_ROUNDED_EDGES"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7230
  +label: "Rounded edges"
  +help: ""
  +settingsKey: "KBIN_GENERAL_ROUNDED_EDGES"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.18 ms
Input props
[
  "label" => "Infinite scrolling"
  "help" => "Automatically load more content when you reach the bottom of the page."
  "settingsKey" => "KBIN_GENERAL_INFINITE_SCROLL"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7286
  +label: "Infinite scrolling"
  +help: "Automatically load more content when you reach the bottom of the page."
  +settingsKey: "KBIN_GENERAL_INFINITE_SCROLL"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.13 ms
Input props
[
  "label" => "Sticky navbar"
  "help" => "The navbar will stick to the top of the page when you scroll down."
  "settingsKey" => "KBIN_GENERAL_FIXED_NAVBAR"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#4490
  +label: "Sticky navbar"
  +help: "The navbar will stick to the top of the page when you scroll down."
  +settingsKey: "KBIN_GENERAL_FIXED_NAVBAR"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.12 ms
Input props
[
  "label" => "Show top bar"
  "settingsKey" => "KBIN_GENERAL_TOPBAR"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#1626
  +label: "Show top bar"
  +help: ""
  +settingsKey: "KBIN_GENERAL_TOPBAR"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.12 ms
Input props
[
  "label" => "Turbo mode (experimental)"
  "settingsKey" => "KBIN_GENERAL_TURBO"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#4565
  +label: "Turbo mode (experimental)"
  +help: ""
  +settingsKey: "KBIN_GENERAL_TURBO"
  +defaultValue: false
  +reloadRequired: true
}
user_settings_row_switch App\Twig\Components\UserSettingsRowSwitchComponent 12.0 MiB 0.23 ms
Input props
[
  "label" => "Mark new comments"
  "settingsKey" => "KBIN_MARK_NEW_COMMENTS"
]
Attributes
[]
Component
App\Twig\Components\UserSettingsRowSwitchComponent {#7053
  +label: "Mark new comments"
  +help: ""
  +settingsKey: "KBIN_MARK_NEW_COMMENTS"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.13 ms
Input props
[
  "label" => "Show "Support Us" block"
  "settingsKey" => "KBIN_GENERAL_SUPPORT_US_BLOCK"
  "defaultValue" => true
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7341
  +label: "Show "Support Us" block"
  +help: ""
  +settingsKey: "KBIN_GENERAL_SUPPORT_US_BLOCK"
  +defaultValue: true
  +reloadRequired: true
}
user_settings_row_switch App\Twig\Components\UserSettingsRowSwitchComponent 12.0 MiB 0.14 ms
Input props
[
  "label" => "Show subscribed users"
  "settingsKey" => "KBIN_SUB_CHANNEL_USERS"
]
Attributes
[]
Component
App\Twig\Components\UserSettingsRowSwitchComponent {#7399
  +label: "Show subscribed users"
  +help: ""
  +settingsKey: "KBIN_SUB_CHANNEL_USERS"
  +defaultValue: false
  +reloadRequired: true
}
user_settings_row_switch App\Twig\Components\UserSettingsRowSwitchComponent 12.0 MiB 0.14 ms
Input props
[
  "label" => "Show subscribed magazines"
  "settingsKey" => "KBIN_SUB_CHANNEL_MAGAZINES"
]
Attributes
[]
Component
App\Twig\Components\UserSettingsRowSwitchComponent {#7455
  +label: "Show subscribed magazines"
  +help: ""
  +settingsKey: "KBIN_SUB_CHANNEL_MAGAZINES"
  +defaultValue: false
  +reloadRequired: true
}
user_settings_row_switch App\Twig\Components\UserSettingsRowSwitchComponent 12.0 MiB 0.14 ms
Input props
[
  "label" => "Show subscribed domains"
  "settingsKey" => "KBIN_SUB_CHANNEL_DOMAINS"
]
Attributes
[]
Component
App\Twig\Components\UserSettingsRowSwitchComponent {#7511
  +label: "Show subscribed domains"
  +help: ""
  +settingsKey: "KBIN_SUB_CHANNEL_DOMAINS"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.13 ms
Input props
[
  "label" => "Auto media preview"
  "help" => "Automatically expand media previews."
  "settingsKey" => "KBIN_ENTRIES_SHOW_PREVIEW"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7567
  +label: "Auto media preview"
  +help: "Automatically expand media previews."
  +settingsKey: "KBIN_ENTRIES_SHOW_PREVIEW"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.17 ms
Input props
[
  "label" => "Compact view"
  "settingsKey" => "KBIN_ENTRIES_COMPACT"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7623
  +label: "Compact view"
  +help: ""
  +settingsKey: "KBIN_ENTRIES_COMPACT"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.13 ms
Input props
[
  "label" => "Show users’ avatars"
  "settingsKey" => "KBIN_ENTRIES_SHOW_USERS_AVATARS"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7679
  +label: "Show users’ avatars"
  +help: ""
  +settingsKey: "KBIN_ENTRIES_SHOW_USERS_AVATARS"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.11 ms
Input props
[
  "label" => "Show magazines’ icons"
  "settingsKey" => "KBIN_ENTRIES_SHOW_MAGAZINES_ICONS"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7735
  +label: "Show magazines’ icons"
  +help: ""
  +settingsKey: "KBIN_ENTRIES_SHOW_MAGAZINES_ICONS"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.12 ms
Input props
[
  "label" => "Show thumbnails"
  "settingsKey" => "KBIN_ENTRIES_SHOW_THUMBNAILS"
  "defaultValue" => true
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7791
  +label: "Show thumbnails"
  +help: ""
  +settingsKey: "KBIN_ENTRIES_SHOW_THUMBNAILS"
  +defaultValue: true
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.11 ms
Input props
[
  "label" => "Auto media preview"
  "help" => "Automatically expand media previews."
  "settingsKey" => "KBIN_POSTS_SHOW_PREVIEW"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7847
  +label: "Auto media preview"
  +help: "Automatically expand media previews."
  +settingsKey: "KBIN_POSTS_SHOW_PREVIEW"
  +defaultValue: false
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.12 ms
Input props
[
  "label" => "Show users’ avatars"
  "settingsKey" => "KBIN_POSTS_SHOW_USERS_AVATARS"
  "defaultValue" => true
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#7903
  +label: "Show users’ avatars"
  +help: ""
  +settingsKey: "KBIN_POSTS_SHOW_USERS_AVATARS"
  +defaultValue: true
  +reloadRequired: true
}
settings_row_enum App\Twig\Components\SettingsRowEnumComponent 12.0 MiB 0.14 ms
Input props
[
  "label" => "Comment reply position"
  "help" => "Display the comment reply form either at the top or bottom of the page. When 'infinite scroll' is enabled the position will always appear at the top."
  "settingsKey" => "KBIN_COMMENTS_REPLY_POSITION"
  "values" => [
    [
      "name" => "top"
      "value" => "TOP"
    ]
    [
      "name" => "bottom"
      "value" => "BOTTOM"
    ]
  ]
  "defaultValue" => "TOP"
]
Attributes
[]
Component
App\Twig\Components\SettingsRowEnumComponent {#7959
  +label: "Comment reply position"
  +help: "Display the comment reply form either at the top or bottom of the page. When 'infinite scroll' is enabled the position will always appear at the top."
  +settingsKey: "KBIN_COMMENTS_REPLY_POSITION"
  +values: [
    [
      "name" => "top"
      "value" => "TOP"
    ]
    [
      "name" => "bottom"
      "value" => "BOTTOM"
    ]
  ]
  +defaultValue: "TOP"
  +reloadRequired: true
}
settings_row_switch App\Twig\Components\SettingsRowSwitchComponent 12.0 MiB 0.12 ms
Input props
[
  "label" => "Show Comment Avatars"
  "help" => "Display/hide user avatars when viewing comments on a single thread or post."
  "settingsKey" => "KBIN_COMMENTS_SHOW_USER_AVATAR"
  "defaultValue" => true
]
Attributes
[]
Component
App\Twig\Components\SettingsRowSwitchComponent {#8017
  +label: "Show Comment Avatars"
  +help: "Display/hide user avatars when viewing comments on a single thread or post."
  +settingsKey: "KBIN_COMMENTS_SHOW_USER_AVATAR"
  +defaultValue: true
  +reloadRequired: true
}
user_actions App\Twig\Components\UserActionsComponent 12.0 MiB 0.46 ms
Input props
[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
]
Attributes
[]
Component
App\Twig\Components\UserActionsComponent {#8093
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "sudneo@lemmy.world"
    +username: "@sudneo@lemmy.world"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728635267 {#275
      date: 2024-10-11 10:27:47.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 75524
    -password: "$2y$13$Ec8CZfxUwkO.EadMd.TZRe.626KkzTebdqlQEAUXg8cfrtTGH0c62"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "sudneo@lemmy.world"
    +apProfileId: "https://lemmy.world/u/sudneo"
    +apPublicUrl: "https://lemmy.world/u/sudneo"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "sudneo"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1707650003 {#269
      date: 2024-02-11 12:13:23.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699968249 {#268
      date: 2023-11-14 14:24:09.0 +01:00
    }
  }
}
date App\Twig\Components\DateComponent 12.0 MiB 0.14 ms
Input props
[
  "date" => DateTimeImmutable @1699968249 {#268
    date: 2023-11-14 14:24:09.0 +01:00
  }
]
Attributes
[]
Component
App\Twig\Components\DateComponent {#8154
  +date: DateTimeImmutable @1699968249 {#268
    date: 2023-11-14 14:24:09.0 +01:00
  }
}
related_magazines App\Twig\Components\RelatedMagazinesComponent 12.0 MiB 1.94 ms
Input props
[
  "magazine" => null
  "tag" => null
]
Attributes
[]
Component
App\Twig\Components\RelatedMagazinesComponent {#8241
  +limit: 4
  +tag: null
  +magazine: null
  +type: "random"
  +title: "random_magazines"
  +refreshedRandom: false
  -repository: App\Repository\MagazineRepository {#1370 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
}
active_users App\Twig\Components\ActiveUsersComponent 12.0 MiB 0.26 ms
Input props
[
  "magazine" => null
]
Attributes
[]
Component
App\Twig\Components\ActiveUsersComponent {#8309
  +magazine: null
  -userRepository: App\Repository\UserRepository {#603 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
}
related_categories App\Twig\Components\RelatedCategoriesComponent 12.0 MiB 7.22 ms
Input props
[
  "magazine" => null
  "tag" => null
]
Attributes
[]
Component
App\Twig\Components\RelatedCategoriesComponent {#8368
  +limit: 4
  +tag: null
  +magazine: null
  +type: "random"
  +title: "random_categories"
  +refreshedRandom: false
  -repository: App\Repository\CategoryRepository {#8369 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
}
related_posts App\Twig\Components\RelatedPostsComponent 12.0 MiB 1.45 ms
Input props
[
  "magazine" => null
  "tag" => null
]
Attributes
[]
Component
App\Twig\Components\RelatedPostsComponent {#8439
  +limit: 4
  +tag: null
  +magazine: null
  +type: "random"
  +post: null
  +title: "random_posts"
  +refreshedRandom: false
  -repository: App\Repository\PostRepository {#8438 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -mentionManager: App\Service\MentionManager {#1504 …}
}
related_entries App\Twig\Components\RelatedEntriesComponent 12.0 MiB 1.26 ms
Input props
[
  "magazine" => null
  "tag" => null
]
Attributes
[]
Component
App\Twig\Components\RelatedEntriesComponent {#8509
  +limit: 4
  +tag: null
  +magazine: null
  +type: "random"
  +entry: null
  +title: "random_entries"
  +refreshedRandom: false
  -repository: App\Repository\EntryRepository {#8508 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -mentionManager: App\Service\MentionManager {#1504 …}
}
support_us_block App\Twig\Components\SupportUsBlock 12.0 MiB 0.19 ms
Input props
[]
Attributes
[]
Component
App\Twig\Components\SupportUsBlock {#8578
  +subject: ? App\Entity\Contracts\VotableInterface
  +url: ? string
  -twig: Twig\Environment {#1252 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -partnerBlockRepository: App\Repository\PartnerBlockRepository {#8579 …}
}
featured_magazines App\Twig\Components\FeaturedMagazinesComponent 12.0 MiB 0.75 ms
Input props
[
  "magazine" => null
]
Attributes
[]
Component
App\Twig\Components\FeaturedMagazinesComponent {#8671
  +magazine: null
  -twig: Twig\Environment {#1252 …}
  -repository: App\Repository\MagazineRepository {#1370 …}
}