GET https://kbin.spritesserver.nl/m/linux@lemmy.ml/t/14608/Linux-hardened-and-Flatpak-Distrobox-Podman-Docker/top

Response
200 OK
IP
52.14.43.204
Profiled on
Token
a454b1

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 0.17 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.04 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#276
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#270
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#272
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
  +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
  +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
  +url: null
  +body: """
    Hi guys!\n
    \n
    I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
    \n
    Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
    \n
    I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
    \n
    Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
    \n
    This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 10
  +favouriteCount: 47
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1700582171 {#2410
    date: 2023-11-21 16:56:11.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1866 …}
  +votes: Doctrine\ORM\PersistentCollection {#1978 …}
  +reports: Doctrine\ORM\PersistentCollection {#1946 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
  +badges: Doctrine\ORM\PersistentCollection {#2426 …}
  +children: []
  -id: 14608
  -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
  -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1700527184
  +visibility: "visible             "
  +apId: "https://feddit.de/post/5843662"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700440784 {#1850
    date: 2023-11-20 01:39:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#276
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#270
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#272
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
  +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
  +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
  +url: null
  +body: """
    Hi guys!\n
    \n
    I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
    \n
    Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
    \n
    I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
    \n
    Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
    \n
    This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 10
  +favouriteCount: 47
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1700582171 {#2410
    date: 2023-11-21 16:56:11.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1866 …}
  +votes: Doctrine\ORM\PersistentCollection {#1978 …}
  +reports: Doctrine\ORM\PersistentCollection {#1946 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
  +badges: Doctrine\ORM\PersistentCollection {#2426 …}
  +children: []
  -id: 14608
  -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
  -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1700527184
  +visibility: "visible             "
  +apId: "https://feddit.de/post/5843662"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700440784 {#1850
    date: 2023-11-20 01:39:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#276
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#270
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#272
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
  +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
  +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
  +url: null
  +body: """
    Hi guys!\n
    \n
    I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
    \n
    Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
    \n
    I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
    \n
    Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
    \n
    This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 10
  +favouriteCount: 47
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1700582171 {#2410
    date: 2023-11-21 16:56:11.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1866 …}
  +votes: Doctrine\ORM\PersistentCollection {#1978 …}
  +reports: Doctrine\ORM\PersistentCollection {#1946 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
  +badges: Doctrine\ORM\PersistentCollection {#2426 …}
  +children: []
  -id: 14608
  -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
  -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1700527184
  +visibility: "visible             "
  +apId: "https://feddit.de/post/5843662"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700440784 {#1850
    date: 2023-11-20 01:39:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#4039
  +user: App\Entity\User {#3988 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1701026119 {#4048
    date: 2023-11-26 20:15:19.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4037 …}
  +nested: Doctrine\ORM\PersistentCollection {#4035 …}
  +votes: Doctrine\ORM\PersistentCollection {#4033 …}
  +reports: Doctrine\ORM\PersistentCollection {#4031 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
  -id: 141752
  -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5443455"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700446985 {#3980
    date: 2023-11-20 03:23:05.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#4039
  +user: App\Entity\User {#3988 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1701026119 {#4048
    date: 2023-11-26 20:15:19.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4037 …}
  +nested: Doctrine\ORM\PersistentCollection {#4035 …}
  +votes: Doctrine\ORM\PersistentCollection {#4033 …}
  +reports: Doctrine\ORM\PersistentCollection {#4031 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
  -id: 141752
  -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5443455"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700446985 {#3980
    date: 2023-11-20 03:23:05.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#4039
  +user: App\Entity\User {#3988 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 13
  +score: 0
  +lastActive: DateTime @1701026119 {#4048
    date: 2023-11-26 20:15:19.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4037 …}
  +nested: Doctrine\ORM\PersistentCollection {#4035 …}
  +votes: Doctrine\ORM\PersistentCollection {#4033 …}
  +reports: Doctrine\ORM\PersistentCollection {#4031 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
  -id: 141752
  -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5443455"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700446985 {#3980
    date: 2023-11-20 03:23:05.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\EntryComment {#4236
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4039
    +user: App\Entity\User {#3988 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 13
    +score: 0
    +lastActive: DateTime @1701026119 {#4048
      date: 2023-11-26 20:15:19.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4037 …}
    +nested: Doctrine\ORM\PersistentCollection {#4035 …}
    +votes: Doctrine\ORM\PersistentCollection {#4033 …}
    +reports: Doctrine\ORM\PersistentCollection {#4031 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
    -id: 141752
    -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5443455"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700446985 {#3980
      date: 2023-11-20 03:23:05.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700481208 {#4237
    date: 2023-11-20 12:53:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4233 …}
  +nested: Doctrine\ORM\PersistentCollection {#4229 …}
  +votes: Doctrine\ORM\PersistentCollection {#4227 …}
  +reports: Doctrine\ORM\PersistentCollection {#4242 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
  -id: 142608
  -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4978957"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700481208 {#4240
    date: 2023-11-20 12:53:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\EntryComment {#4236
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4039
    +user: App\Entity\User {#3988 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 13
    +score: 0
    +lastActive: DateTime @1701026119 {#4048
      date: 2023-11-26 20:15:19.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4037 …}
    +nested: Doctrine\ORM\PersistentCollection {#4035 …}
    +votes: Doctrine\ORM\PersistentCollection {#4033 …}
    +reports: Doctrine\ORM\PersistentCollection {#4031 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
    -id: 141752
    -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5443455"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700446985 {#3980
      date: 2023-11-20 03:23:05.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700481208 {#4237
    date: 2023-11-20 12:53:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4233 …}
  +nested: Doctrine\ORM\PersistentCollection {#4229 …}
  +votes: Doctrine\ORM\PersistentCollection {#4227 …}
  +reports: Doctrine\ORM\PersistentCollection {#4242 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
  -id: 142608
  -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4978957"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700481208 {#4240
    date: 2023-11-20 12:53:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\EntryComment {#4236
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4039
    +user: App\Entity\User {#3988 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 13
    +score: 0
    +lastActive: DateTime @1701026119 {#4048
      date: 2023-11-26 20:15:19.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4037 …}
    +nested: Doctrine\ORM\PersistentCollection {#4035 …}
    +votes: Doctrine\ORM\PersistentCollection {#4033 …}
    +reports: Doctrine\ORM\PersistentCollection {#4031 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
    -id: 141752
    -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5443455"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700446985 {#3980
      date: 2023-11-20 03:23:05.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700481208 {#4237
    date: 2023-11-20 12:53:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4233 …}
  +nested: Doctrine\ORM\PersistentCollection {#4229 …}
  +votes: Doctrine\ORM\PersistentCollection {#4227 …}
  +reports: Doctrine\ORM\PersistentCollection {#4242 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
  -id: 142608
  -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4978957"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700481208 {#4240
    date: 2023-11-20 12:53:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
14 DENIED moderate 
App\Entity\EntryComment {#4264
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4236
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4039
      +user: App\Entity\User {#3988 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: null
      +root: null
      +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 13
      +score: 0
      +lastActive: DateTime @1701026119 {#4048
        date: 2023-11-26 20:15:19.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4037 …}
      +nested: Doctrine\ORM\PersistentCollection {#4035 …}
      +votes: Doctrine\ORM\PersistentCollection {#4033 …}
      +reports: Doctrine\ORM\PersistentCollection {#4031 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
      -id: 141752
      -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5443455"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700446985 {#3980
        date: 2023-11-20 03:23:05.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700481208 {#4237
      date: 2023-11-20 12:53:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4233 …}
    +nested: Doctrine\ORM\PersistentCollection {#4229 …}
    +votes: Doctrine\ORM\PersistentCollection {#4227 …}
    +reports: Doctrine\ORM\PersistentCollection {#4242 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
    -id: 142608
    -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/4978957"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700481208 {#4240
      date: 2023-11-20 12:53:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: """
    Wine should just work.   \n
    Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1700482828 {#4269
    date: 2023-11-20 13:20:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4275 …}
  +nested: Doctrine\ORM\PersistentCollection {#4277 …}
  +votes: Doctrine\ORM\PersistentCollection {#4273 …}
  +reports: Doctrine\ORM\PersistentCollection {#4280 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
  -id: 142660
  -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5450153"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700482828 {#4266
    date: 2023-11-20 13:20:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
15 DENIED edit 
App\Entity\EntryComment {#4264
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4236
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4039
      +user: App\Entity\User {#3988 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: null
      +root: null
      +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 13
      +score: 0
      +lastActive: DateTime @1701026119 {#4048
        date: 2023-11-26 20:15:19.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4037 …}
      +nested: Doctrine\ORM\PersistentCollection {#4035 …}
      +votes: Doctrine\ORM\PersistentCollection {#4033 …}
      +reports: Doctrine\ORM\PersistentCollection {#4031 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
      -id: 141752
      -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5443455"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700446985 {#3980
        date: 2023-11-20 03:23:05.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700481208 {#4237
      date: 2023-11-20 12:53:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4233 …}
    +nested: Doctrine\ORM\PersistentCollection {#4229 …}
    +votes: Doctrine\ORM\PersistentCollection {#4227 …}
    +reports: Doctrine\ORM\PersistentCollection {#4242 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
    -id: 142608
    -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/4978957"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700481208 {#4240
      date: 2023-11-20 12:53:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: """
    Wine should just work.   \n
    Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1700482828 {#4269
    date: 2023-11-20 13:20:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4275 …}
  +nested: Doctrine\ORM\PersistentCollection {#4277 …}
  +votes: Doctrine\ORM\PersistentCollection {#4273 …}
  +reports: Doctrine\ORM\PersistentCollection {#4280 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
  -id: 142660
  -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5450153"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700482828 {#4266
    date: 2023-11-20 13:20:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
16 DENIED moderate 
App\Entity\EntryComment {#4264
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4236
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4039
      +user: App\Entity\User {#3988 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: null
      +root: null
      +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 13
      +score: 0
      +lastActive: DateTime @1701026119 {#4048
        date: 2023-11-26 20:15:19.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4037 …}
      +nested: Doctrine\ORM\PersistentCollection {#4035 …}
      +votes: Doctrine\ORM\PersistentCollection {#4033 …}
      +reports: Doctrine\ORM\PersistentCollection {#4031 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
      -id: 141752
      -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5443455"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700446985 {#3980
        date: 2023-11-20 03:23:05.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700481208 {#4237
      date: 2023-11-20 12:53:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4233 …}
    +nested: Doctrine\ORM\PersistentCollection {#4229 …}
    +votes: Doctrine\ORM\PersistentCollection {#4227 …}
    +reports: Doctrine\ORM\PersistentCollection {#4242 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
    -id: 142608
    -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/4978957"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700481208 {#4240
      date: 2023-11-20 12:53:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: """
    Wine should just work.   \n
    Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1700482828 {#4269
    date: 2023-11-20 13:20:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4275 …}
  +nested: Doctrine\ORM\PersistentCollection {#4277 …}
  +votes: Doctrine\ORM\PersistentCollection {#4273 …}
  +reports: Doctrine\ORM\PersistentCollection {#4280 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
  -id: 142660
  -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5450153"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700482828 {#4266
    date: 2023-11-20 13:20:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
18 DENIED moderate 
App\Entity\EntryComment {#4301
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4264
    +user: Proxies\__CG__\App\Entity\User {#4272 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4236
      +user: Proxies\__CG__\App\Entity\User {#1943 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4039
        +user: App\Entity\User {#3988 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 13
        +score: 0
        +lastActive: DateTime @1701026119 {#4048
          date: 2023-11-26 20:15:19.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4037 …}
        +nested: Doctrine\ORM\PersistentCollection {#4035 …}
        +votes: Doctrine\ORM\PersistentCollection {#4033 …}
        +reports: Doctrine\ORM\PersistentCollection {#4031 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
        -id: 141752
        -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/5443455"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700446985 {#3980
          date: 2023-11-20 03:23:05.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700481208 {#4237
        date: 2023-11-20 12:53:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4233 …}
      +nested: Doctrine\ORM\PersistentCollection {#4229 …}
      +votes: Doctrine\ORM\PersistentCollection {#4227 …}
      +reports: Doctrine\ORM\PersistentCollection {#4242 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
      -id: 142608
      -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.de/comment/4978957"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700481208 {#4240
        date: 2023-11-20 12:53:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: """
      Wine should just work.   \n
      Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1700482828 {#4269
      date: 2023-11-20 13:20:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4275 …}
    +nested: Doctrine\ORM\PersistentCollection {#4277 …}
    +votes: Doctrine\ORM\PersistentCollection {#4273 …}
    +reports: Doctrine\ORM\PersistentCollection {#4280 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
    -id: 142660
    -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5450153"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700482828 {#4266
      date: 2023-11-20 13:20:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700513472 {#4296
    date: 2023-11-20 21:51:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4293 …}
  +nested: Doctrine\ORM\PersistentCollection {#4290 …}
  +votes: Doctrine\ORM\PersistentCollection {#4288 …}
  +reports: Doctrine\ORM\PersistentCollection {#4302 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
  -id: 144056
  -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4991859"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700513472 {#4299
    date: 2023-11-20 21:51:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
19 DENIED edit 
App\Entity\EntryComment {#4301
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4264
    +user: Proxies\__CG__\App\Entity\User {#4272 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4236
      +user: Proxies\__CG__\App\Entity\User {#1943 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4039
        +user: App\Entity\User {#3988 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 13
        +score: 0
        +lastActive: DateTime @1701026119 {#4048
          date: 2023-11-26 20:15:19.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4037 …}
        +nested: Doctrine\ORM\PersistentCollection {#4035 …}
        +votes: Doctrine\ORM\PersistentCollection {#4033 …}
        +reports: Doctrine\ORM\PersistentCollection {#4031 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
        -id: 141752
        -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/5443455"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700446985 {#3980
          date: 2023-11-20 03:23:05.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700481208 {#4237
        date: 2023-11-20 12:53:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4233 …}
      +nested: Doctrine\ORM\PersistentCollection {#4229 …}
      +votes: Doctrine\ORM\PersistentCollection {#4227 …}
      +reports: Doctrine\ORM\PersistentCollection {#4242 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
      -id: 142608
      -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.de/comment/4978957"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700481208 {#4240
        date: 2023-11-20 12:53:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: """
      Wine should just work.   \n
      Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1700482828 {#4269
      date: 2023-11-20 13:20:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4275 …}
    +nested: Doctrine\ORM\PersistentCollection {#4277 …}
    +votes: Doctrine\ORM\PersistentCollection {#4273 …}
    +reports: Doctrine\ORM\PersistentCollection {#4280 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
    -id: 142660
    -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5450153"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700482828 {#4266
      date: 2023-11-20 13:20:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700513472 {#4296
    date: 2023-11-20 21:51:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4293 …}
  +nested: Doctrine\ORM\PersistentCollection {#4290 …}
  +votes: Doctrine\ORM\PersistentCollection {#4288 …}
  +reports: Doctrine\ORM\PersistentCollection {#4302 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
  -id: 144056
  -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4991859"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700513472 {#4299
    date: 2023-11-20 21:51:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
20 DENIED moderate 
App\Entity\EntryComment {#4301
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4264
    +user: Proxies\__CG__\App\Entity\User {#4272 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4236
      +user: Proxies\__CG__\App\Entity\User {#1943 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4039
        +user: App\Entity\User {#3988 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: null
        +root: null
        +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 13
        +score: 0
        +lastActive: DateTime @1701026119 {#4048
          date: 2023-11-26 20:15:19.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4037 …}
        +nested: Doctrine\ORM\PersistentCollection {#4035 …}
        +votes: Doctrine\ORM\PersistentCollection {#4033 …}
        +reports: Doctrine\ORM\PersistentCollection {#4031 …}
        +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
        -id: 141752
        -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/5443455"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700446985 {#3980
          date: 2023-11-20 03:23:05.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700481208 {#4237
        date: 2023-11-20 12:53:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4233 …}
      +nested: Doctrine\ORM\PersistentCollection {#4229 …}
      +votes: Doctrine\ORM\PersistentCollection {#4227 …}
      +reports: Doctrine\ORM\PersistentCollection {#4242 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
      -id: 142608
      -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.de/comment/4978957"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700481208 {#4240
        date: 2023-11-20 12:53:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: """
      Wine should just work.   \n
      Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1700482828 {#4269
      date: 2023-11-20 13:20:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4275 …}
    +nested: Doctrine\ORM\PersistentCollection {#4277 …}
    +votes: Doctrine\ORM\PersistentCollection {#4273 …}
    +reports: Doctrine\ORM\PersistentCollection {#4280 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
    -id: 142660
    -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5450153"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700482828 {#4266
      date: 2023-11-20 13:20:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700513472 {#4296
    date: 2023-11-20 21:51:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4293 …}
  +nested: Doctrine\ORM\PersistentCollection {#4290 …}
  +votes: Doctrine\ORM\PersistentCollection {#4288 …}
  +reports: Doctrine\ORM\PersistentCollection {#4302 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
  -id: 144056
  -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4991859"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700513472 {#4299
    date: 2023-11-20 21:51:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
22 DENIED moderate 
App\Entity\EntryComment {#4315
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4301
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4264
      +user: Proxies\__CG__\App\Entity\User {#4272 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4236
        +user: Proxies\__CG__\App\Entity\User {#1943 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4039
          +user: App\Entity\User {#3988 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: null
          +root: null
          +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
          +lang: "en"
          +isAdult: false
          +favouriteCount: 13
          +score: 0
          +lastActive: DateTime @1701026119 {#4048
            date: 2023-11-26 20:15:19.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4037 …}
          +nested: Doctrine\ORM\PersistentCollection {#4035 …}
          +votes: Doctrine\ORM\PersistentCollection {#4033 …}
          +reports: Doctrine\ORM\PersistentCollection {#4031 …}
          +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
          -id: 141752
          -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/5443455"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700446985 {#3980
            date: 2023-11-20 03:23:05.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 1
        +score: 0
        +lastActive: DateTime @1700481208 {#4237
          date: 2023-11-20 12:53:28.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4233 …}
        +nested: Doctrine\ORM\PersistentCollection {#4229 …}
        +votes: Doctrine\ORM\PersistentCollection {#4227 …}
        +reports: Doctrine\ORM\PersistentCollection {#4242 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
        -id: 142608
        -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.de/comment/4978957"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700481208 {#4240
          date: 2023-11-20 12:53:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: """
        Wine should just work.   \n
        Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1700482828 {#4269
        date: 2023-11-20 13:20:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4275 …}
      +nested: Doctrine\ORM\PersistentCollection {#4277 …}
      +votes: Doctrine\ORM\PersistentCollection {#4273 …}
      +reports: Doctrine\ORM\PersistentCollection {#4280 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
      -id: 142660
      -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5450153"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700482828 {#4266
        date: 2023-11-20 13:20:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700513472 {#4296
      date: 2023-11-20 21:51:12.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4293 …}
    +nested: Doctrine\ORM\PersistentCollection {#4290 …}
    +votes: Doctrine\ORM\PersistentCollection {#4288 …}
    +reports: Doctrine\ORM\PersistentCollection {#4302 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
    -id: 144056
    -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/4991859"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700513472 {#4299
      date: 2023-11-20 21:51:12.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: """
    [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
    It’s an Android thing.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700516064 {#4318
    date: 2023-11-20 22:34:24.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4313 …}
  +nested: Doctrine\ORM\PersistentCollection {#4311 …}
  +votes: Doctrine\ORM\PersistentCollection {#4309 …}
  +reports: Doctrine\ORM\PersistentCollection {#4325 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
  -id: 144206
  -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5460458"
  +editedAt: DateTimeImmutable @1700933097 {#4321
    date: 2023-11-25 18:24:57.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700516064 {#4323
    date: 2023-11-20 22:34:24.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
23 DENIED edit 
App\Entity\EntryComment {#4315
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4301
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4264
      +user: Proxies\__CG__\App\Entity\User {#4272 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4236
        +user: Proxies\__CG__\App\Entity\User {#1943 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4039
          +user: App\Entity\User {#3988 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: null
          +root: null
          +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
          +lang: "en"
          +isAdult: false
          +favouriteCount: 13
          +score: 0
          +lastActive: DateTime @1701026119 {#4048
            date: 2023-11-26 20:15:19.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4037 …}
          +nested: Doctrine\ORM\PersistentCollection {#4035 …}
          +votes: Doctrine\ORM\PersistentCollection {#4033 …}
          +reports: Doctrine\ORM\PersistentCollection {#4031 …}
          +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
          -id: 141752
          -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/5443455"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700446985 {#3980
            date: 2023-11-20 03:23:05.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 1
        +score: 0
        +lastActive: DateTime @1700481208 {#4237
          date: 2023-11-20 12:53:28.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4233 …}
        +nested: Doctrine\ORM\PersistentCollection {#4229 …}
        +votes: Doctrine\ORM\PersistentCollection {#4227 …}
        +reports: Doctrine\ORM\PersistentCollection {#4242 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
        -id: 142608
        -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.de/comment/4978957"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700481208 {#4240
          date: 2023-11-20 12:53:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: """
        Wine should just work.   \n
        Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1700482828 {#4269
        date: 2023-11-20 13:20:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4275 …}
      +nested: Doctrine\ORM\PersistentCollection {#4277 …}
      +votes: Doctrine\ORM\PersistentCollection {#4273 …}
      +reports: Doctrine\ORM\PersistentCollection {#4280 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
      -id: 142660
      -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5450153"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700482828 {#4266
        date: 2023-11-20 13:20:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700513472 {#4296
      date: 2023-11-20 21:51:12.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4293 …}
    +nested: Doctrine\ORM\PersistentCollection {#4290 …}
    +votes: Doctrine\ORM\PersistentCollection {#4288 …}
    +reports: Doctrine\ORM\PersistentCollection {#4302 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
    -id: 144056
    -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/4991859"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700513472 {#4299
      date: 2023-11-20 21:51:12.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: """
    [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
    It’s an Android thing.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700516064 {#4318
    date: 2023-11-20 22:34:24.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4313 …}
  +nested: Doctrine\ORM\PersistentCollection {#4311 …}
  +votes: Doctrine\ORM\PersistentCollection {#4309 …}
  +reports: Doctrine\ORM\PersistentCollection {#4325 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
  -id: 144206
  -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5460458"
  +editedAt: DateTimeImmutable @1700933097 {#4321
    date: 2023-11-25 18:24:57.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700516064 {#4323
    date: 2023-11-20 22:34:24.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
24 DENIED moderate 
App\Entity\EntryComment {#4315
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4301
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4264
      +user: Proxies\__CG__\App\Entity\User {#4272 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4236
        +user: Proxies\__CG__\App\Entity\User {#1943 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4039
          +user: App\Entity\User {#3988 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: null
          +root: null
          +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
          +lang: "en"
          +isAdult: false
          +favouriteCount: 13
          +score: 0
          +lastActive: DateTime @1701026119 {#4048
            date: 2023-11-26 20:15:19.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4037 …}
          +nested: Doctrine\ORM\PersistentCollection {#4035 …}
          +votes: Doctrine\ORM\PersistentCollection {#4033 …}
          +reports: Doctrine\ORM\PersistentCollection {#4031 …}
          +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
          -id: 141752
          -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/5443455"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700446985 {#3980
            date: 2023-11-20 03:23:05.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 1
        +score: 0
        +lastActive: DateTime @1700481208 {#4237
          date: 2023-11-20 12:53:28.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4233 …}
        +nested: Doctrine\ORM\PersistentCollection {#4229 …}
        +votes: Doctrine\ORM\PersistentCollection {#4227 …}
        +reports: Doctrine\ORM\PersistentCollection {#4242 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
        -id: 142608
        -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.de/comment/4978957"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700481208 {#4240
          date: 2023-11-20 12:53:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: """
        Wine should just work.   \n
        Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 2
      +score: 0
      +lastActive: DateTime @1700482828 {#4269
        date: 2023-11-20 13:20:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4275 …}
      +nested: Doctrine\ORM\PersistentCollection {#4277 …}
      +votes: Doctrine\ORM\PersistentCollection {#4273 …}
      +reports: Doctrine\ORM\PersistentCollection {#4280 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
      -id: 142660
      -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5450153"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700482828 {#4266
        date: 2023-11-20 13:20:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700513472 {#4296
      date: 2023-11-20 21:51:12.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4293 …}
    +nested: Doctrine\ORM\PersistentCollection {#4290 …}
    +votes: Doctrine\ORM\PersistentCollection {#4288 …}
    +reports: Doctrine\ORM\PersistentCollection {#4302 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
    -id: 144056
    -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/4991859"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700513472 {#4299
      date: 2023-11-20 21:51:12.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: """
    [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
    It’s an Android thing.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700516064 {#4318
    date: 2023-11-20 22:34:24.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4313 …}
  +nested: Doctrine\ORM\PersistentCollection {#4311 …}
  +votes: Doctrine\ORM\PersistentCollection {#4309 …}
  +reports: Doctrine\ORM\PersistentCollection {#4325 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
  -id: 144206
  -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5460458"
  +editedAt: DateTimeImmutable @1700933097 {#4321
    date: 2023-11-25 18:24:57.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700516064 {#4323
    date: 2023-11-20 22:34:24.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
26 DENIED moderate 
App\Entity\EntryComment {#4346
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4315
    +user: Proxies\__CG__\App\Entity\User {#4272 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4301
      +user: Proxies\__CG__\App\Entity\User {#1943 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4264
        +user: Proxies\__CG__\App\Entity\User {#4272 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4236
          +user: Proxies\__CG__\App\Entity\User {#1943 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: App\Entity\EntryComment {#4039
            +user: App\Entity\User {#3988 …}
            +entry: App\Entity\Entry {#2388}
            +magazine: App\Entity\Magazine {#266}
            +image: null
            +parent: null
            +root: null
            +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
            +lang: "en"
            +isAdult: false
            +favouriteCount: 13
            +score: 0
            +lastActive: DateTime @1701026119 {#4048
              date: 2023-11-26 20:15:19.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@Pantherina@feddit.de"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4037 …}
            +nested: Doctrine\ORM\PersistentCollection {#4035 …}
            +votes: Doctrine\ORM\PersistentCollection {#4033 …}
            +reports: Doctrine\ORM\PersistentCollection {#4031 …}
            +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
            -id: 141752
            -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://lemmy.world/comment/5443455"
            +editedAt: null
            +createdAt: DateTimeImmutable @1700446985 {#3980
              date: 2023-11-20 03:23:05.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4039}
          +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
          +lang: "en"
          +isAdult: false
          +favouriteCount: 1
          +score: 0
          +lastActive: DateTime @1700481208 {#4237
            date: 2023-11-20 12:53:28.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
            "@markstos@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4233 …}
          +nested: Doctrine\ORM\PersistentCollection {#4229 …}
          +votes: Doctrine\ORM\PersistentCollection {#4227 …}
          +reports: Doctrine\ORM\PersistentCollection {#4242 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
          -id: 142608
          -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://feddit.de/comment/4978957"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700481208 {#4240
            date: 2023-11-20 12:53:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: """
          Wine should just work.   \n
          Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1700482828 {#4269
          date: 2023-11-20 13:20:28.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4275 …}
        +nested: Doctrine\ORM\PersistentCollection {#4277 …}
        +votes: Doctrine\ORM\PersistentCollection {#4273 …}
        +reports: Doctrine\ORM\PersistentCollection {#4280 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
        -id: 142660
        -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/5450153"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700482828 {#4266
          date: 2023-11-20 13:20:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700513472 {#4296
        date: 2023-11-20 21:51:12.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
        "@Rustmilian@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4293 …}
      +nested: Doctrine\ORM\PersistentCollection {#4290 …}
      +votes: Doctrine\ORM\PersistentCollection {#4288 …}
      +reports: Doctrine\ORM\PersistentCollection {#4302 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
      -id: 144056
      -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.de/comment/4991859"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700513472 {#4299
        date: 2023-11-20 21:51:12.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: """
      [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
      It’s an Android thing.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700516064 {#4318
      date: 2023-11-20 22:34:24.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4313 …}
    +nested: Doctrine\ORM\PersistentCollection {#4311 …}
    +votes: Doctrine\ORM\PersistentCollection {#4309 …}
    +reports: Doctrine\ORM\PersistentCollection {#4325 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
    -id: 144206
    -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5460458"
    +editedAt: DateTimeImmutable @1700933097 {#4321
      date: 2023-11-25 18:24:57.0 +01:00
    }
    +createdAt: DateTimeImmutable @1700516064 {#4323
      date: 2023-11-20 22:34:24.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "Crazy that it just works on Fedora"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700533231 {#4341
    date: 2023-11-21 03:20:31.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4338 …}
  +nested: Doctrine\ORM\PersistentCollection {#4335 …}
  +votes: Doctrine\ORM\PersistentCollection {#4333 …}
  +reports: Doctrine\ORM\PersistentCollection {#4347 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4349 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4351 …}
  -id: 145076
  -bodyTs: "'crazi':1 'fedora':7 'work':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/5000370"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700533231 {#4344
    date: 2023-11-21 03:20:31.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
27 DENIED edit 
App\Entity\EntryComment {#4346
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4315
    +user: Proxies\__CG__\App\Entity\User {#4272 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4301
      +user: Proxies\__CG__\App\Entity\User {#1943 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4264
        +user: Proxies\__CG__\App\Entity\User {#4272 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4236
          +user: Proxies\__CG__\App\Entity\User {#1943 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: App\Entity\EntryComment {#4039
            +user: App\Entity\User {#3988 …}
            +entry: App\Entity\Entry {#2388}
            +magazine: App\Entity\Magazine {#266}
            +image: null
            +parent: null
            +root: null
            +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
            +lang: "en"
            +isAdult: false
            +favouriteCount: 13
            +score: 0
            +lastActive: DateTime @1701026119 {#4048
              date: 2023-11-26 20:15:19.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@Pantherina@feddit.de"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4037 …}
            +nested: Doctrine\ORM\PersistentCollection {#4035 …}
            +votes: Doctrine\ORM\PersistentCollection {#4033 …}
            +reports: Doctrine\ORM\PersistentCollection {#4031 …}
            +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
            -id: 141752
            -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://lemmy.world/comment/5443455"
            +editedAt: null
            +createdAt: DateTimeImmutable @1700446985 {#3980
              date: 2023-11-20 03:23:05.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4039}
          +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
          +lang: "en"
          +isAdult: false
          +favouriteCount: 1
          +score: 0
          +lastActive: DateTime @1700481208 {#4237
            date: 2023-11-20 12:53:28.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
            "@markstos@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4233 …}
          +nested: Doctrine\ORM\PersistentCollection {#4229 …}
          +votes: Doctrine\ORM\PersistentCollection {#4227 …}
          +reports: Doctrine\ORM\PersistentCollection {#4242 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
          -id: 142608
          -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://feddit.de/comment/4978957"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700481208 {#4240
            date: 2023-11-20 12:53:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: """
          Wine should just work.   \n
          Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1700482828 {#4269
          date: 2023-11-20 13:20:28.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4275 …}
        +nested: Doctrine\ORM\PersistentCollection {#4277 …}
        +votes: Doctrine\ORM\PersistentCollection {#4273 …}
        +reports: Doctrine\ORM\PersistentCollection {#4280 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
        -id: 142660
        -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/5450153"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700482828 {#4266
          date: 2023-11-20 13:20:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700513472 {#4296
        date: 2023-11-20 21:51:12.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
        "@Rustmilian@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4293 …}
      +nested: Doctrine\ORM\PersistentCollection {#4290 …}
      +votes: Doctrine\ORM\PersistentCollection {#4288 …}
      +reports: Doctrine\ORM\PersistentCollection {#4302 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
      -id: 144056
      -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.de/comment/4991859"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700513472 {#4299
        date: 2023-11-20 21:51:12.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: """
      [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
      It’s an Android thing.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700516064 {#4318
      date: 2023-11-20 22:34:24.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4313 …}
    +nested: Doctrine\ORM\PersistentCollection {#4311 …}
    +votes: Doctrine\ORM\PersistentCollection {#4309 …}
    +reports: Doctrine\ORM\PersistentCollection {#4325 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
    -id: 144206
    -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5460458"
    +editedAt: DateTimeImmutable @1700933097 {#4321
      date: 2023-11-25 18:24:57.0 +01:00
    }
    +createdAt: DateTimeImmutable @1700516064 {#4323
      date: 2023-11-20 22:34:24.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "Crazy that it just works on Fedora"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700533231 {#4341
    date: 2023-11-21 03:20:31.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4338 …}
  +nested: Doctrine\ORM\PersistentCollection {#4335 …}
  +votes: Doctrine\ORM\PersistentCollection {#4333 …}
  +reports: Doctrine\ORM\PersistentCollection {#4347 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4349 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4351 …}
  -id: 145076
  -bodyTs: "'crazi':1 'fedora':7 'work':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/5000370"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700533231 {#4344
    date: 2023-11-21 03:20:31.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
28 DENIED moderate 
App\Entity\EntryComment {#4346
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4315
    +user: Proxies\__CG__\App\Entity\User {#4272 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4301
      +user: Proxies\__CG__\App\Entity\User {#1943 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4264
        +user: Proxies\__CG__\App\Entity\User {#4272 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4236
          +user: Proxies\__CG__\App\Entity\User {#1943 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: App\Entity\EntryComment {#4039
            +user: App\Entity\User {#3988 …}
            +entry: App\Entity\Entry {#2388}
            +magazine: App\Entity\Magazine {#266}
            +image: null
            +parent: null
            +root: null
            +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
            +lang: "en"
            +isAdult: false
            +favouriteCount: 13
            +score: 0
            +lastActive: DateTime @1701026119 {#4048
              date: 2023-11-26 20:15:19.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@Pantherina@feddit.de"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4037 …}
            +nested: Doctrine\ORM\PersistentCollection {#4035 …}
            +votes: Doctrine\ORM\PersistentCollection {#4033 …}
            +reports: Doctrine\ORM\PersistentCollection {#4031 …}
            +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
            -id: 141752
            -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://lemmy.world/comment/5443455"
            +editedAt: null
            +createdAt: DateTimeImmutable @1700446985 {#3980
              date: 2023-11-20 03:23:05.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4039}
          +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
          +lang: "en"
          +isAdult: false
          +favouriteCount: 1
          +score: 0
          +lastActive: DateTime @1700481208 {#4237
            date: 2023-11-20 12:53:28.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
            "@markstos@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4233 …}
          +nested: Doctrine\ORM\PersistentCollection {#4229 …}
          +votes: Doctrine\ORM\PersistentCollection {#4227 …}
          +reports: Doctrine\ORM\PersistentCollection {#4242 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
          -id: 142608
          -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://feddit.de/comment/4978957"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700481208 {#4240
            date: 2023-11-20 12:53:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: """
          Wine should just work.   \n
          Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 2
        +score: 0
        +lastActive: DateTime @1700482828 {#4269
          date: 2023-11-20 13:20:28.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4275 …}
        +nested: Doctrine\ORM\PersistentCollection {#4277 …}
        +votes: Doctrine\ORM\PersistentCollection {#4273 …}
        +reports: Doctrine\ORM\PersistentCollection {#4280 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
        -id: 142660
        -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/5450153"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700482828 {#4266
          date: 2023-11-20 13:20:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700513472 {#4296
        date: 2023-11-20 21:51:12.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
        "@Rustmilian@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4293 …}
      +nested: Doctrine\ORM\PersistentCollection {#4290 …}
      +votes: Doctrine\ORM\PersistentCollection {#4288 …}
      +reports: Doctrine\ORM\PersistentCollection {#4302 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
      -id: 144056
      -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://feddit.de/comment/4991859"
      +editedAt: null
      +createdAt: DateTimeImmutable @1700513472 {#4299
        date: 2023-11-20 21:51:12.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: """
      [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
      It’s an Android thing.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1700516064 {#4318
      date: 2023-11-20 22:34:24.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4313 …}
    +nested: Doctrine\ORM\PersistentCollection {#4311 …}
    +votes: Doctrine\ORM\PersistentCollection {#4309 …}
    +reports: Doctrine\ORM\PersistentCollection {#4325 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
    -id: 144206
    -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5460458"
    +editedAt: DateTimeImmutable @1700933097 {#4321
      date: 2023-11-25 18:24:57.0 +01:00
    }
    +createdAt: DateTimeImmutable @1700516064 {#4323
      date: 2023-11-20 22:34:24.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "Crazy that it just works on Fedora"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700533231 {#4341
    date: 2023-11-21 03:20:31.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4338 …}
  +nested: Doctrine\ORM\PersistentCollection {#4335 …}
  +votes: Doctrine\ORM\PersistentCollection {#4333 …}
  +reports: Doctrine\ORM\PersistentCollection {#4347 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4349 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4351 …}
  -id: 145076
  -bodyTs: "'crazi':1 'fedora':7 'work':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/5000370"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700533231 {#4344
    date: 2023-11-21 03:20:31.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
30 DENIED moderate 
App\Entity\EntryComment {#4368
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4346
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4315
      +user: Proxies\__CG__\App\Entity\User {#4272 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4301
        +user: Proxies\__CG__\App\Entity\User {#1943 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4264
          +user: Proxies\__CG__\App\Entity\User {#4272 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: App\Entity\EntryComment {#4236
            +user: Proxies\__CG__\App\Entity\User {#1943 …}
            +entry: App\Entity\Entry {#2388}
            +magazine: App\Entity\Magazine {#266}
            +image: null
            +parent: App\Entity\EntryComment {#4039
              +user: App\Entity\User {#3988 …}
              +entry: App\Entity\Entry {#2388}
              +magazine: App\Entity\Magazine {#266}
              +image: null
              +parent: null
              +root: null
              +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
              +lang: "en"
              +isAdult: false
              +favouriteCount: 13
              +score: 0
              +lastActive: DateTime @1701026119 {#4048
                date: 2023-11-26 20:15:19.0 +01:00
              }
              +ip: null
              +tags: null
              +mentions: [
                "@Pantherina@feddit.de"
              ]
              +children: Doctrine\ORM\PersistentCollection {#4037 …}
              +nested: Doctrine\ORM\PersistentCollection {#4035 …}
              +votes: Doctrine\ORM\PersistentCollection {#4033 …}
              +reports: Doctrine\ORM\PersistentCollection {#4031 …}
              +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
              +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
              -id: 141752
              -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
              +ranking: 0
              +commentCount: 0
              +upVotes: 0
              +downVotes: 0
              +visibility: "visible             "
              +apId: "https://lemmy.world/comment/5443455"
              +editedAt: null
              +createdAt: DateTimeImmutable @1700446985 {#3980
                date: 2023-11-20 03:23:05.0 +01:00
              }
            }
            +root: App\Entity\EntryComment {#4039}
            +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
            +lang: "en"
            +isAdult: false
            +favouriteCount: 1
            +score: 0
            +lastActive: DateTime @1700481208 {#4237
              date: 2023-11-20 12:53:28.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@Pantherina@feddit.de"
              "@markstos@lemmy.world"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4233 …}
            +nested: Doctrine\ORM\PersistentCollection {#4229 …}
            +votes: Doctrine\ORM\PersistentCollection {#4227 …}
            +reports: Doctrine\ORM\PersistentCollection {#4242 …}
            +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
            -id: 142608
            -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://feddit.de/comment/4978957"
            +editedAt: null
            +createdAt: DateTimeImmutable @1700481208 {#4240
              date: 2023-11-20 12:53:28.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4039}
          +body: """
            Wine should just work.   \n
            Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 2
          +score: 0
          +lastActive: DateTime @1700482828 {#4269
            date: 2023-11-20 13:20:28.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
            "@markstos@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4275 …}
          +nested: Doctrine\ORM\PersistentCollection {#4277 …}
          +votes: Doctrine\ORM\PersistentCollection {#4273 …}
          +reports: Doctrine\ORM\PersistentCollection {#4280 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
          -id: 142660
          -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/5450153"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700482828 {#4266
            date: 2023-11-20 13:20:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 1
        +score: 0
        +lastActive: DateTime @1700513472 {#4296
          date: 2023-11-20 21:51:12.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
          "@Rustmilian@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4293 …}
        +nested: Doctrine\ORM\PersistentCollection {#4290 …}
        +votes: Doctrine\ORM\PersistentCollection {#4288 …}
        +reports: Doctrine\ORM\PersistentCollection {#4302 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
        -id: 144056
        -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.de/comment/4991859"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700513472 {#4299
          date: 2023-11-20 21:51:12.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: """
        [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
        It’s an Android thing.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700516064 {#4318
        date: 2023-11-20 22:34:24.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
        "@Rustmilian@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4313 …}
      +nested: Doctrine\ORM\PersistentCollection {#4311 …}
      +votes: Doctrine\ORM\PersistentCollection {#4309 …}
      +reports: Doctrine\ORM\PersistentCollection {#4325 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
      -id: 144206
      -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5460458"
      +editedAt: DateTimeImmutable @1700933097 {#4321
        date: 2023-11-25 18:24:57.0 +01:00
      }
      +createdAt: DateTimeImmutable @1700516064 {#4323
        date: 2023-11-20 22:34:24.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "Crazy that it just works on Fedora"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1700533231 {#4341
      date: 2023-11-21 03:20:31.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4338 …}
    +nested: Doctrine\ORM\PersistentCollection {#4335 …}
    +votes: Doctrine\ORM\PersistentCollection {#4333 …}
    +reports: Doctrine\ORM\PersistentCollection {#4347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4349 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4351 …}
    -id: 145076
    -bodyTs: "'crazi':1 'fedora':7 'work':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/5000370"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700533231 {#4344
      date: 2023-11-21 03:20:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "That just means they have the feature enabled at compile time. Linux-Zen is the only kernel that has it on Arch."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1700582171 {#4363
    date: 2023-11-21 16:56:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4360 …}
  +nested: Doctrine\ORM\PersistentCollection {#4357 …}
  +votes: Doctrine\ORM\PersistentCollection {#4355 …}
  +reports: Doctrine\ORM\PersistentCollection {#4369 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4371 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4373 …}
  -id: 147284
  -bodyTs: "'arch':23 'compil':10 'enabl':8 'featur':7 'kernel':18 'linux':13 'linux-zen':12 'mean':3 'time':11 'zen':14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5479569"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700582171 {#4366
    date: 2023-11-21 16:56:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
31 DENIED edit 
App\Entity\EntryComment {#4368
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4346
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4315
      +user: Proxies\__CG__\App\Entity\User {#4272 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4301
        +user: Proxies\__CG__\App\Entity\User {#1943 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4264
          +user: Proxies\__CG__\App\Entity\User {#4272 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: App\Entity\EntryComment {#4236
            +user: Proxies\__CG__\App\Entity\User {#1943 …}
            +entry: App\Entity\Entry {#2388}
            +magazine: App\Entity\Magazine {#266}
            +image: null
            +parent: App\Entity\EntryComment {#4039
              +user: App\Entity\User {#3988 …}
              +entry: App\Entity\Entry {#2388}
              +magazine: App\Entity\Magazine {#266}
              +image: null
              +parent: null
              +root: null
              +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
              +lang: "en"
              +isAdult: false
              +favouriteCount: 13
              +score: 0
              +lastActive: DateTime @1701026119 {#4048
                date: 2023-11-26 20:15:19.0 +01:00
              }
              +ip: null
              +tags: null
              +mentions: [
                "@Pantherina@feddit.de"
              ]
              +children: Doctrine\ORM\PersistentCollection {#4037 …}
              +nested: Doctrine\ORM\PersistentCollection {#4035 …}
              +votes: Doctrine\ORM\PersistentCollection {#4033 …}
              +reports: Doctrine\ORM\PersistentCollection {#4031 …}
              +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
              +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
              -id: 141752
              -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
              +ranking: 0
              +commentCount: 0
              +upVotes: 0
              +downVotes: 0
              +visibility: "visible             "
              +apId: "https://lemmy.world/comment/5443455"
              +editedAt: null
              +createdAt: DateTimeImmutable @1700446985 {#3980
                date: 2023-11-20 03:23:05.0 +01:00
              }
            }
            +root: App\Entity\EntryComment {#4039}
            +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
            +lang: "en"
            +isAdult: false
            +favouriteCount: 1
            +score: 0
            +lastActive: DateTime @1700481208 {#4237
              date: 2023-11-20 12:53:28.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@Pantherina@feddit.de"
              "@markstos@lemmy.world"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4233 …}
            +nested: Doctrine\ORM\PersistentCollection {#4229 …}
            +votes: Doctrine\ORM\PersistentCollection {#4227 …}
            +reports: Doctrine\ORM\PersistentCollection {#4242 …}
            +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
            -id: 142608
            -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://feddit.de/comment/4978957"
            +editedAt: null
            +createdAt: DateTimeImmutable @1700481208 {#4240
              date: 2023-11-20 12:53:28.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4039}
          +body: """
            Wine should just work.   \n
            Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 2
          +score: 0
          +lastActive: DateTime @1700482828 {#4269
            date: 2023-11-20 13:20:28.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
            "@markstos@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4275 …}
          +nested: Doctrine\ORM\PersistentCollection {#4277 …}
          +votes: Doctrine\ORM\PersistentCollection {#4273 …}
          +reports: Doctrine\ORM\PersistentCollection {#4280 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
          -id: 142660
          -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/5450153"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700482828 {#4266
            date: 2023-11-20 13:20:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 1
        +score: 0
        +lastActive: DateTime @1700513472 {#4296
          date: 2023-11-20 21:51:12.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
          "@Rustmilian@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4293 …}
        +nested: Doctrine\ORM\PersistentCollection {#4290 …}
        +votes: Doctrine\ORM\PersistentCollection {#4288 …}
        +reports: Doctrine\ORM\PersistentCollection {#4302 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
        -id: 144056
        -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.de/comment/4991859"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700513472 {#4299
          date: 2023-11-20 21:51:12.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: """
        [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
        It’s an Android thing.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700516064 {#4318
        date: 2023-11-20 22:34:24.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
        "@Rustmilian@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4313 …}
      +nested: Doctrine\ORM\PersistentCollection {#4311 …}
      +votes: Doctrine\ORM\PersistentCollection {#4309 …}
      +reports: Doctrine\ORM\PersistentCollection {#4325 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
      -id: 144206
      -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5460458"
      +editedAt: DateTimeImmutable @1700933097 {#4321
        date: 2023-11-25 18:24:57.0 +01:00
      }
      +createdAt: DateTimeImmutable @1700516064 {#4323
        date: 2023-11-20 22:34:24.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "Crazy that it just works on Fedora"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1700533231 {#4341
      date: 2023-11-21 03:20:31.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4338 …}
    +nested: Doctrine\ORM\PersistentCollection {#4335 …}
    +votes: Doctrine\ORM\PersistentCollection {#4333 …}
    +reports: Doctrine\ORM\PersistentCollection {#4347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4349 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4351 …}
    -id: 145076
    -bodyTs: "'crazi':1 'fedora':7 'work':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/5000370"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700533231 {#4344
      date: 2023-11-21 03:20:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "That just means they have the feature enabled at compile time. Linux-Zen is the only kernel that has it on Arch."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1700582171 {#4363
    date: 2023-11-21 16:56:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4360 …}
  +nested: Doctrine\ORM\PersistentCollection {#4357 …}
  +votes: Doctrine\ORM\PersistentCollection {#4355 …}
  +reports: Doctrine\ORM\PersistentCollection {#4369 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4371 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4373 …}
  -id: 147284
  -bodyTs: "'arch':23 'compil':10 'enabl':8 'featur':7 'kernel':18 'linux':13 'linux-zen':12 'mean':3 'time':11 'zen':14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5479569"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700582171 {#4366
    date: 2023-11-21 16:56:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
32 DENIED moderate 
App\Entity\EntryComment {#4368
  +user: Proxies\__CG__\App\Entity\User {#4272 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4346
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: App\Entity\EntryComment {#4315
      +user: Proxies\__CG__\App\Entity\User {#4272 …}
      +entry: App\Entity\Entry {#2388}
      +magazine: App\Entity\Magazine {#266}
      +image: null
      +parent: App\Entity\EntryComment {#4301
        +user: Proxies\__CG__\App\Entity\User {#1943 …}
        +entry: App\Entity\Entry {#2388}
        +magazine: App\Entity\Magazine {#266}
        +image: null
        +parent: App\Entity\EntryComment {#4264
          +user: Proxies\__CG__\App\Entity\User {#4272 …}
          +entry: App\Entity\Entry {#2388}
          +magazine: App\Entity\Magazine {#266}
          +image: null
          +parent: App\Entity\EntryComment {#4236
            +user: Proxies\__CG__\App\Entity\User {#1943 …}
            +entry: App\Entity\Entry {#2388}
            +magazine: App\Entity\Magazine {#266}
            +image: null
            +parent: App\Entity\EntryComment {#4039
              +user: App\Entity\User {#3988 …}
              +entry: App\Entity\Entry {#2388}
              +magazine: App\Entity\Magazine {#266}
              +image: null
              +parent: null
              +root: null
              +body: "Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled."
              +lang: "en"
              +isAdult: false
              +favouriteCount: 13
              +score: 0
              +lastActive: DateTime @1701026119 {#4048
                date: 2023-11-26 20:15:19.0 +01:00
              }
              +ip: null
              +tags: null
              +mentions: [
                "@Pantherina@feddit.de"
              ]
              +children: Doctrine\ORM\PersistentCollection {#4037 …}
              +nested: Doctrine\ORM\PersistentCollection {#4035 …}
              +votes: Doctrine\ORM\PersistentCollection {#4033 …}
              +reports: Doctrine\ORM\PersistentCollection {#4031 …}
              +favourites: Doctrine\ORM\PersistentCollection {#3999 …}
              +notifications: Doctrine\ORM\PersistentCollection {#4003 …}
              -id: 141752
              -bodyTs: "'could':18 'custom':9 'disabl':22 'distrobox':5 'docker':4 'like':2 'namespac':11 'podman':3 'see':15 'tool':1 'toolbox':7 'uid':10 'use':8 'work':19"
              +ranking: 0
              +commentCount: 0
              +upVotes: 0
              +downVotes: 0
              +visibility: "visible             "
              +apId: "https://lemmy.world/comment/5443455"
              +editedAt: null
              +createdAt: DateTimeImmutable @1700446985 {#3980
                date: 2023-11-20 03:23:05.0 +01:00
              }
            }
            +root: App\Entity\EntryComment {#4039}
            +body: "With a specific exception only for one software. I would be happy with Flatpak and Podman. Maybe Waydroid and wine too though?"
            +lang: "en"
            +isAdult: false
            +favouriteCount: 1
            +score: 0
            +lastActive: DateTime @1700481208 {#4237
              date: 2023-11-20 12:53:28.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@Pantherina@feddit.de"
              "@markstos@lemmy.world"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4233 …}
            +nested: Doctrine\ORM\PersistentCollection {#4229 …}
            +votes: Doctrine\ORM\PersistentCollection {#4227 …}
            +reports: Doctrine\ORM\PersistentCollection {#4242 …}
            +favourites: Doctrine\ORM\PersistentCollection {#4244 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4246 …}
            -id: 142608
            -bodyTs: "'except':4 'flatpak':14 'happi':12 'mayb':17 'one':7 'podman':16 'softwar':8 'specif':3 'though':22 'waydroid':18 'wine':20 'would':10"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://feddit.de/comment/4978957"
            +editedAt: null
            +createdAt: DateTimeImmutable @1700481208 {#4240
              date: 2023-11-20 12:53:28.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4039}
          +body: """
            Wine should just work.   \n
            Waydroid needs extra support from the kernel that linux-hardend has disabled at compile time. There’s a DKMS solution however.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 2
          +score: 0
          +lastActive: DateTime @1700482828 {#4269
            date: 2023-11-20 13:20:28.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@Pantherina@feddit.de"
            "@markstos@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4275 …}
          +nested: Doctrine\ORM\PersistentCollection {#4277 …}
          +votes: Doctrine\ORM\PersistentCollection {#4273 …}
          +reports: Doctrine\ORM\PersistentCollection {#4280 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4282 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4284 …}
          -id: 142660
          -bodyTs: "'compil':19 'disabl':17 'dkms':24 'extra':7 'hardend':15 'howev':26 'kernel':11 'linux':14 'linux-hardend':13 'need':6 'solut':25 'support':8 'time':20 'waydroid':5 'wine':1 'work':4"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/5450153"
          +editedAt: null
          +createdAt: DateTimeImmutable @1700482828 {#4266
            date: 2023-11-20 13:20:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4039}
        +body: "[This one?](https://github.com/sickcodes/anbox-modules-dkms) it doesnt mention the hardened kernel at all, is this some obsolete modification not needed in modern Kernels?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 1
        +score: 0
        +lastActive: DateTime @1700513472 {#4296
          date: 2023-11-20 21:51:12.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@Pantherina@feddit.de"
          "@markstos@lemmy.world"
          "@Rustmilian@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4293 …}
        +nested: Doctrine\ORM\PersistentCollection {#4290 …}
        +votes: Doctrine\ORM\PersistentCollection {#4288 …}
        +reports: Doctrine\ORM\PersistentCollection {#4302 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4304 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4306 …}
        -id: 144056
        -bodyTs: "'/sickcodes/anbox-modules-dkms)':5 'doesnt':7 'github.com':4 'github.com/sickcodes/anbox-modules-dkms)':3 'harden':10 'kernel':11,23 'mention':8 'modern':22 'modif':18 'need':20 'obsolet':17 'one':2"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://feddit.de/comment/4991859"
        +editedAt: null
        +createdAt: DateTimeImmutable @1700513472 {#4299
          date: 2023-11-20 21:51:12.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4039}
      +body: """
        [binder_linux-dkms](https://aur.archlinux.org/packages/binder_linux-dkms/)   \n
        It’s an Android thing.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1700516064 {#4318
        date: 2023-11-20 22:34:24.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Pantherina@feddit.de"
        "@markstos@lemmy.world"
        "@Rustmilian@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4313 …}
      +nested: Doctrine\ORM\PersistentCollection {#4311 …}
      +votes: Doctrine\ORM\PersistentCollection {#4309 …}
      +reports: Doctrine\ORM\PersistentCollection {#4325 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4327 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4329 …}
      -id: 144206
      -bodyTs: "'/packages/binder_linux-dkms/)':7 'android':11 'aur.archlinux.org':6 'aur.archlinux.org/packages/binder_linux-dkms/)':5 'binder':1 'dkms':4 'linux':3 'linux-dkm':2 'thing':12"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/5460458"
      +editedAt: DateTimeImmutable @1700933097 {#4321
        date: 2023-11-25 18:24:57.0 +01:00
      }
      +createdAt: DateTimeImmutable @1700516064 {#4323
        date: 2023-11-20 22:34:24.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4039}
    +body: "Crazy that it just works on Fedora"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1700533231 {#4341
      date: 2023-11-21 03:20:31.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
      "@markstos@lemmy.world"
      "@Rustmilian@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4338 …}
    +nested: Doctrine\ORM\PersistentCollection {#4335 …}
    +votes: Doctrine\ORM\PersistentCollection {#4333 …}
    +reports: Doctrine\ORM\PersistentCollection {#4347 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4349 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4351 …}
    -id: 145076
    -bodyTs: "'crazi':1 'fedora':7 'work':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.de/comment/5000370"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700533231 {#4344
      date: 2023-11-21 03:20:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4039}
  +body: "That just means they have the feature enabled at compile time. Linux-Zen is the only kernel that has it on Arch."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1700582171 {#4363
    date: 2023-11-21 16:56:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@markstos@lemmy.world"
    "@Rustmilian@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4360 …}
  +nested: Doctrine\ORM\PersistentCollection {#4357 …}
  +votes: Doctrine\ORM\PersistentCollection {#4355 …}
  +reports: Doctrine\ORM\PersistentCollection {#4369 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4371 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4373 …}
  -id: 147284
  -bodyTs: "'arch':23 'compil':10 'enabl':8 'featur':7 'kernel':18 'linux':13 'linux-zen':12 'mean':3 'time':11 'zen':14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5479569"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700582171 {#4366
    date: 2023-11-21 16:56:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
34 DENIED moderate 
App\Entity\EntryComment {#4085
  +user: App\Entity\User {#4069 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Basically, you want to not disable `kernel.unprivileged_userns_clone`.\n
    \n
    For a temporary solution that has to be redone after reboot, there is `sysctl kernel.unprivileged_userns_clone=1`.\n
    \n
    For a lasting solution, consider `echo kernel.unprivileged_userns_clone=1 | sudo tee /etc/sysctl.d/99-enable-unpriv-userns.conf`.\n
    \n
    In either case you’re foregoing security for the sake of convenience/functionality, so I understand why you would rather not act upon either of them.\n
    \n
    I don’t know what the solution is that would be analogous to installing `bubblewrap-suid`. Perhaps, it’s worth exploring the projects found within the github page of [Awesome Fedora Security](https://github.com/34N0/awesome-fedora-security) for some pointers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1700467195 {#4091
    date: 2023-11-20 08:59:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4077 …}
  +nested: Doctrine\ORM\PersistentCollection {#4080 …}
  +votes: Doctrine\ORM\PersistentCollection {#4078 …}
  +reports: Doctrine\ORM\PersistentCollection {#4076 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4075 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4066 …}
  -id: 142286
  -bodyTs: "'/34n0/awesome-fedora-security)':101 '/etc/sysctl.d/99-enable-unpriv-userns.conf':40 '1':27,37 'act':61 'analog':77 'awesom':96 'basic':1 'bubblewrap':81 'bubblewrap-suid':80 'case':43 'clone':9,26,36 'consid':32 'convenience/functionality':52 'disabl':6 'echo':33 'either':42,63 'explor':87 'fedora':97 'forego':46 'found':90 'github':93 'github.com':100 'github.com/34n0/awesome-fedora-security)':99 'instal':79 'kernel.unprivileged':7,24,34 'know':69 'last':30 'page':94 'perhap':83 'pointer':104 'project':89 'rather':59 're':45 'reboot':20 'redon':18 'sake':50 'secur':47,98 'solut':13,31,72 'sudo':38 'suid':82 'sysctl':23 'tee':39 'temporari':12 'understand':55 'upon':62 'usern':8,25,35 'want':3 'within':91 'worth':86 'would':58,75"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/5958327"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700467195 {#4089
    date: 2023-11-20 08:59:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
35 DENIED edit 
App\Entity\EntryComment {#4085
  +user: App\Entity\User {#4069 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Basically, you want to not disable `kernel.unprivileged_userns_clone`.\n
    \n
    For a temporary solution that has to be redone after reboot, there is `sysctl kernel.unprivileged_userns_clone=1`.\n
    \n
    For a lasting solution, consider `echo kernel.unprivileged_userns_clone=1 | sudo tee /etc/sysctl.d/99-enable-unpriv-userns.conf`.\n
    \n
    In either case you’re foregoing security for the sake of convenience/functionality, so I understand why you would rather not act upon either of them.\n
    \n
    I don’t know what the solution is that would be analogous to installing `bubblewrap-suid`. Perhaps, it’s worth exploring the projects found within the github page of [Awesome Fedora Security](https://github.com/34N0/awesome-fedora-security) for some pointers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1700467195 {#4091
    date: 2023-11-20 08:59:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4077 …}
  +nested: Doctrine\ORM\PersistentCollection {#4080 …}
  +votes: Doctrine\ORM\PersistentCollection {#4078 …}
  +reports: Doctrine\ORM\PersistentCollection {#4076 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4075 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4066 …}
  -id: 142286
  -bodyTs: "'/34n0/awesome-fedora-security)':101 '/etc/sysctl.d/99-enable-unpriv-userns.conf':40 '1':27,37 'act':61 'analog':77 'awesom':96 'basic':1 'bubblewrap':81 'bubblewrap-suid':80 'case':43 'clone':9,26,36 'consid':32 'convenience/functionality':52 'disabl':6 'echo':33 'either':42,63 'explor':87 'fedora':97 'forego':46 'found':90 'github':93 'github.com':100 'github.com/34n0/awesome-fedora-security)':99 'instal':79 'kernel.unprivileged':7,24,34 'know':69 'last':30 'page':94 'perhap':83 'pointer':104 'project':89 'rather':59 're':45 'reboot':20 'redon':18 'sake':50 'secur':47,98 'solut':13,31,72 'sudo':38 'suid':82 'sysctl':23 'tee':39 'temporari':12 'understand':55 'upon':62 'usern':8,25,35 'want':3 'within':91 'worth':86 'would':58,75"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/5958327"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700467195 {#4089
    date: 2023-11-20 08:59:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
36 DENIED moderate 
App\Entity\EntryComment {#4085
  +user: App\Entity\User {#4069 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Basically, you want to not disable `kernel.unprivileged_userns_clone`.\n
    \n
    For a temporary solution that has to be redone after reboot, there is `sysctl kernel.unprivileged_userns_clone=1`.\n
    \n
    For a lasting solution, consider `echo kernel.unprivileged_userns_clone=1 | sudo tee /etc/sysctl.d/99-enable-unpriv-userns.conf`.\n
    \n
    In either case you’re foregoing security for the sake of convenience/functionality, so I understand why you would rather not act upon either of them.\n
    \n
    I don’t know what the solution is that would be analogous to installing `bubblewrap-suid`. Perhaps, it’s worth exploring the projects found within the github page of [Awesome Fedora Security](https://github.com/34N0/awesome-fedora-security) for some pointers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1700467195 {#4091
    date: 2023-11-20 08:59:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4077 …}
  +nested: Doctrine\ORM\PersistentCollection {#4080 …}
  +votes: Doctrine\ORM\PersistentCollection {#4078 …}
  +reports: Doctrine\ORM\PersistentCollection {#4076 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4075 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4066 …}
  -id: 142286
  -bodyTs: "'/34n0/awesome-fedora-security)':101 '/etc/sysctl.d/99-enable-unpriv-userns.conf':40 '1':27,37 'act':61 'analog':77 'awesom':96 'basic':1 'bubblewrap':81 'bubblewrap-suid':80 'case':43 'clone':9,26,36 'consid':32 'convenience/functionality':52 'disabl':6 'echo':33 'either':42,63 'explor':87 'fedora':97 'forego':46 'found':90 'github':93 'github.com':100 'github.com/34n0/awesome-fedora-security)':99 'instal':79 'kernel.unprivileged':7,24,34 'know':69 'last':30 'page':94 'perhap':83 'pointer':104 'project':89 'rather':59 're':45 'reboot':20 'redon':18 'sake':50 'secur':47,98 'solut':13,31,72 'sudo':38 'suid':82 'sysctl':23 'tee':39 'temporari':12 'understand':55 'upon':62 'usern':8,25,35 'want':3 'within':91 'worth':86 'would':58,75"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/5958327"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700467195 {#4089
    date: 2023-11-20 08:59:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
38 DENIED moderate 
App\Entity\EntryComment {#4152
  +user: App\Entity\User {#4165 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    If you are running things inside of containers you aren’t helping yourself by disabling unprivileged namespaces, you are actually just running more things as root. Inside the containers they generally block namespaces anyway.\n
    \n
    TBH I’ve never heard anything positive about most of what hardened does.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1700883129 {#4147
    date: 2023-11-25 04:32:09.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4153 …}
  +nested: Doctrine\ORM\PersistentCollection {#4155 …}
  +votes: Doctrine\ORM\PersistentCollection {#4157 …}
  +reports: Doctrine\ORM\PersistentCollection {#4159 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4161 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4163 …}
  -id: 142006
  -bodyTs: "'actual':20 'anyth':40 'anyway':34 'aren':10 'block':32 'contain':8,29 'disabl':15 'general':31 'harden':46 'heard':39 'help':12 'insid':6,27 'namespac':17,33 'never':38 'posit':41 'root':26 'run':4,22 'tbh':35 'thing':5,24 'unprivileg':16 've':37"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5445390"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700455629 {#4148
    date: 2023-11-20 05:47:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
39 DENIED edit 
App\Entity\EntryComment {#4152
  +user: App\Entity\User {#4165 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    If you are running things inside of containers you aren’t helping yourself by disabling unprivileged namespaces, you are actually just running more things as root. Inside the containers they generally block namespaces anyway.\n
    \n
    TBH I’ve never heard anything positive about most of what hardened does.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1700883129 {#4147
    date: 2023-11-25 04:32:09.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4153 …}
  +nested: Doctrine\ORM\PersistentCollection {#4155 …}
  +votes: Doctrine\ORM\PersistentCollection {#4157 …}
  +reports: Doctrine\ORM\PersistentCollection {#4159 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4161 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4163 …}
  -id: 142006
  -bodyTs: "'actual':20 'anyth':40 'anyway':34 'aren':10 'block':32 'contain':8,29 'disabl':15 'general':31 'harden':46 'heard':39 'help':12 'insid':6,27 'namespac':17,33 'never':38 'posit':41 'root':26 'run':4,22 'tbh':35 'thing':5,24 'unprivileg':16 've':37"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5445390"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700455629 {#4148
    date: 2023-11-20 05:47:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
40 DENIED moderate 
App\Entity\EntryComment {#4152
  +user: App\Entity\User {#4165 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    If you are running things inside of containers you aren’t helping yourself by disabling unprivileged namespaces, you are actually just running more things as root. Inside the containers they generally block namespaces anyway.\n
    \n
    TBH I’ve never heard anything positive about most of what hardened does.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1700883129 {#4147
    date: 2023-11-25 04:32:09.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4153 …}
  +nested: Doctrine\ORM\PersistentCollection {#4155 …}
  +votes: Doctrine\ORM\PersistentCollection {#4157 …}
  +reports: Doctrine\ORM\PersistentCollection {#4159 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4161 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4163 …}
  -id: 142006
  -bodyTs: "'actual':20 'anyth':40 'anyway':34 'aren':10 'block':32 'contain':8,29 'disabl':15 'general':31 'harden':46 'heard':39 'help':12 'insid':6,27 'namespac':17,33 'never':38 'posit':41 'root':26 'run':4,22 'tbh':35 'thing':5,24 'unprivileg':16 've':37"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5445390"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700455629 {#4148
    date: 2023-11-20 05:47:09.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
41 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
42 DENIED moderate 
App\Entity\EntryComment {#4250
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4152
    +user: App\Entity\User {#4165 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: """
      If you are running things inside of containers you aren’t helping yourself by disabling unprivileged namespaces, you are actually just running more things as root. Inside the containers they generally block namespaces anyway.\n
      \n
      TBH I’ve never heard anything positive about most of what hardened does.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1700883129 {#4147
      date: 2023-11-25 04:32:09.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4153 …}
    +nested: Doctrine\ORM\PersistentCollection {#4155 …}
    +votes: Doctrine\ORM\PersistentCollection {#4157 …}
    +reports: Doctrine\ORM\PersistentCollection {#4159 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4161 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4163 …}
    -id: 142006
    -bodyTs: "'actual':20 'anyth':40 'anyway':34 'aren':10 'block':32 'contain':8,29 'disabl':15 'general':31 'harden':46 'heard':39 'help':12 'insid':6,27 'namespac':17,33 'never':38 'posit':41 'root':26 'run':4,22 'tbh':35 'thing':5,24 'unprivileg':16 've':37"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5445390"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700455629 {#4148
      date: 2023-11-20 05:47:09.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4152}
  +body: "I guess I would just disable this one hardening setting like another person recommended."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700481322 {#4248
    date: 2023-11-20 12:55:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@AProfessional@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4251 …}
  +nested: Doctrine\ORM\PersistentCollection {#4253 …}
  +votes: Doctrine\ORM\PersistentCollection {#4255 …}
  +reports: Doctrine\ORM\PersistentCollection {#4257 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4259 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4261 …}
  -id: 142618
  -bodyTs: "'anoth':12 'disabl':6 'guess':2 'harden':9 'like':11 'one':8 'person':13 'recommend':14 'set':10 'would':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4978994"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700481322 {#4249
    date: 2023-11-20 12:55:22.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
43 DENIED edit 
App\Entity\EntryComment {#4250
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4152
    +user: App\Entity\User {#4165 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: """
      If you are running things inside of containers you aren’t helping yourself by disabling unprivileged namespaces, you are actually just running more things as root. Inside the containers they generally block namespaces anyway.\n
      \n
      TBH I’ve never heard anything positive about most of what hardened does.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1700883129 {#4147
      date: 2023-11-25 04:32:09.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4153 …}
    +nested: Doctrine\ORM\PersistentCollection {#4155 …}
    +votes: Doctrine\ORM\PersistentCollection {#4157 …}
    +reports: Doctrine\ORM\PersistentCollection {#4159 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4161 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4163 …}
    -id: 142006
    -bodyTs: "'actual':20 'anyth':40 'anyway':34 'aren':10 'block':32 'contain':8,29 'disabl':15 'general':31 'harden':46 'heard':39 'help':12 'insid':6,27 'namespac':17,33 'never':38 'posit':41 'root':26 'run':4,22 'tbh':35 'thing':5,24 'unprivileg':16 've':37"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5445390"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700455629 {#4148
      date: 2023-11-20 05:47:09.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4152}
  +body: "I guess I would just disable this one hardening setting like another person recommended."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700481322 {#4248
    date: 2023-11-20 12:55:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@AProfessional@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4251 …}
  +nested: Doctrine\ORM\PersistentCollection {#4253 …}
  +votes: Doctrine\ORM\PersistentCollection {#4255 …}
  +reports: Doctrine\ORM\PersistentCollection {#4257 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4259 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4261 …}
  -id: 142618
  -bodyTs: "'anoth':12 'disabl':6 'guess':2 'harden':9 'like':11 'one':8 'person':13 'recommend':14 'set':10 'would':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4978994"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700481322 {#4249
    date: 2023-11-20 12:55:22.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
44 DENIED moderate 
App\Entity\EntryComment {#4250
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#276
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#270
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#272
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "Linux-hardened-and-Flatpak-Distrobox-Podman-Docker"
    +title: "Linux-hardened and Flatpak, Distrobox, Podman, Docker"
    +url: null
    +body: """
      Hi guys!\n
      \n
      I am currently trying Arch in a VM and I like it a lot. Wanted to try the hardened kernel all the time, but it has the problem of forbidding custom namespaces.\n
      \n
      Tbh I dont even know what that is, but on arch, installing `bubblewrap-suid` fixes the flatpak problem.\n
      \n
      I could not find such a package for Podman, which is used as backend (?) in Distrobox.\n
      \n
      Is there a way to make Podman, Docker, Distrobox, Toolbox work on linux-hardened?\n
      \n
      This is a big requirement for making a Fedora Atomic version using the hardened kernel, which sounds great, as they completely rely on these containers.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 10
    +favouriteCount: 47
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700582171 {#2410
      date: 2023-11-21 16:56:11.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 14608
    -titleTs: "'distrobox':6 'docker':8 'flatpak':5 'harden':3 'linux':2 'linux-harden':1 'podman':7"
    -bodyTs: "'arch':7,45 'atom':94 'backend':67 'big':88 'bubblewrap':48 'bubblewrap-suid':47 'complet':105 'contain':109 'could':55 'current':5 'custom':33 'distrobox':69,78 'docker':77 'dont':37 'even':38 'fedora':93 'find':57 'fix':50 'flatpak':52 'forbid':32 'great':102 'guy':2 'harden':21,84,98 'hi':1 'instal':46 'kernel':22,99 'know':39 'like':13 'linux':83 'linux-harden':82 'lot':16 'make':75,91 'namespac':34 'packag':60 'podman':62,76 'problem':30,53 'reli':106 'requir':89 'sound':101 'suid':49 'tbh':35 'time':25 'toolbox':79 'tri':6,19 'use':65,96 'version':95 'vm':10 'want':17 'way':73 'work':80"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700527184
    +visibility: "visible             "
    +apId: "https://feddit.de/post/5843662"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700440784 {#1850
      date: 2023-11-20 01:39:44.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: App\Entity\EntryComment {#4152
    +user: App\Entity\User {#4165 …}
    +entry: App\Entity\Entry {#2388}
    +magazine: App\Entity\Magazine {#266}
    +image: null
    +parent: null
    +root: null
    +body: """
      If you are running things inside of containers you aren’t helping yourself by disabling unprivileged namespaces, you are actually just running more things as root. Inside the containers they generally block namespaces anyway.\n
      \n
      TBH I’ve never heard anything positive about most of what hardened does.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1700883129 {#4147
      date: 2023-11-25 04:32:09.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Pantherina@feddit.de"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4153 …}
    +nested: Doctrine\ORM\PersistentCollection {#4155 …}
    +votes: Doctrine\ORM\PersistentCollection {#4157 …}
    +reports: Doctrine\ORM\PersistentCollection {#4159 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4161 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4163 …}
    -id: 142006
    -bodyTs: "'actual':20 'anyth':40 'anyway':34 'aren':10 'block':32 'contain':8,29 'disabl':15 'general':31 'harden':46 'heard':39 'help':12 'insid':6,27 'namespac':17,33 'never':38 'posit':41 'root':26 'run':4,22 'tbh':35 'thing':5,24 'unprivileg':16 've':37"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/5445390"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700455629 {#4148
      date: 2023-11-20 05:47:09.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4152}
  +body: "I guess I would just disable this one hardening setting like another person recommended."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700481322 {#4248
    date: 2023-11-20 12:55:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Pantherina@feddit.de"
    "@AProfessional@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4251 …}
  +nested: Doctrine\ORM\PersistentCollection {#4253 …}
  +votes: Doctrine\ORM\PersistentCollection {#4255 …}
  +reports: Doctrine\ORM\PersistentCollection {#4257 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4259 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4261 …}
  -id: 142618
  -bodyTs: "'anoth':12 'disabl':6 'guess':2 'harden':9 'like':11 'one':8 'person':13 'recommend':14 'set':10 'would':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/4978994"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700481322 {#4249
    date: 2023-11-20 12:55:22.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
45 DENIED edit 
App\Entity\Magazine {#266
  +icon: Proxies\__CG__\App\Entity\Image {#247 …}
  +name: "linux@lemmy.ml"
  +title: "linux"
  +description: """
    From Wikipedia, the free encyclopedia\n
    \n
    Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
    \n
    Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
    \n
    ### Rules\n
    \n
    - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
    - No misinformation\n
    - No NSFW content\n
    - No hate speech, bigotry, etc\n
    \n
    ### Related Communities\n
    \n
    - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
    - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
    - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
    - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
    \n
    Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1406
  +entryCommentCount: 28632
  +postCount: 6
  +postCommentCount: 214
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583542 {#276
    date: 2024-10-22 09:52:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#238 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
  +entries: Doctrine\ORM\PersistentCollection {#181 …}
  +posts: Doctrine\ORM\PersistentCollection {#139 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
  +bans: Doctrine\ORM\PersistentCollection {#118 …}
  +reports: Doctrine\ORM\PersistentCollection {#104 …}
  +badges: Doctrine\ORM\PersistentCollection {#82 …}
  +logs: Doctrine\ORM\PersistentCollection {#72 …}
  +awards: Doctrine\ORM\PersistentCollection {#61 …}
  +categories: Doctrine\ORM\PersistentCollection {#1820 …}
  -id: 73
  +apId: "linux@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/linux"
  +apPublicUrl: "https://lemmy.ml/c/linux"
  +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "linux"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583596 {#270
    date: 2024-10-22 09:53:16.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1698929468 {#272
    date: 2023-11-02 13:51:08.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details