Redirect 302 redirect from GET @entry_comment_create (418ebb)

GET https://kbin.spritesserver.nl/index.php/m/selfhosted@lemmy.world/t/28686/Why-docker

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
5.68 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
0.00 ms (none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
0.07 ms (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5
"App\Security\Voter\EntryCommentVoter"
6
"App\Security\Voter\EntryVoter"
7
"App\Security\Voter\MagazineVoter"
8
"App\Security\Voter\MessageThreadVoter"
9
"App\Security\Voter\MessageVoter"
10
"App\Security\Voter\NotificationVoter"
11
"App\Security\Voter\OAuth2UserConsentVoter"
12
"App\Security\Voter\PostCommentVoter"
13
"App\Security\Voter\PostVoter"
14
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
2 DENIED moderate
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#274
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#268
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#270
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Why-docker"
  +title: "Why docker"
  +url: null
  +body: """
    Hi! Question in the title.\n
    \n
    I get that its super easy to setup. But its really worthwhile to have something that:\n
    \n
    - runs everything as root (not many well built images with proper useranagement it seems)\n
    - you cannot really know which stuff is in the images: you must trust who built it\n
    - lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
    \n
    I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 50
  +favouriteCount: 89
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722359949 {#2418
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 28686
  -titleTs: "'docker':2"
  -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704992786
  +visibility: "visible             "
  +apId: "https://feddit.it/post/4722445"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906386 {#1858
    date: 2024-01-10 18:06:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
3 DENIED edit
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#274
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#268
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#270
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Why-docker"
  +title: "Why docker"
  +url: null
  +body: """
    Hi! Question in the title.\n
    \n
    I get that its super easy to setup. But its really worthwhile to have something that:\n
    \n
    - runs everything as root (not many well built images with proper useranagement it seems)\n
    - you cannot really know which stuff is in the images: you must trust who built it\n
    - lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
    \n
    I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 50
  +favouriteCount: 89
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722359949 {#2418
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 28686
  -titleTs: "'docker':2"
  -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704992786
  +visibility: "visible             "
  +apId: "https://feddit.it/post/4722445"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906386 {#1858
    date: 2024-01-10 18:06:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
4 DENIED moderate
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#274
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#268
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#270
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Why-docker"
  +title: "Why docker"
  +url: null
  +body: """
    Hi! Question in the title.\n
    \n
    I get that its super easy to setup. But its really worthwhile to have something that:\n
    \n
    - runs everything as root (not many well built images with proper useranagement it seems)\n
    - you cannot really know which stuff is in the images: you must trust who built it\n
    - lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
    \n
    I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 50
  +favouriteCount: 89
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722359949 {#2418
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 28686
  -titleTs: "'docker':2"
  -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704992786
  +visibility: "visible             "
  +apId: "https://feddit.it/post/4722445"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906386 {#1858
    date: 2024-01-10 18:06:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
6 DENIED moderate
App\Entity\EntryComment {#4043
  +user: App\Entity\User {#3991 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "About the trust issue. There’s no more or less trust than running on bare metal. Sure you could compile everything from source but you probably won’t, and you might trust your distro package manager, but that still has a similar problem."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705123297 {#4052
    date: 2024-01-13 06:21:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4041 …}
  +nested: Doctrine\ORM\PersistentCollection {#4039 …}
  +votes: Doctrine\ORM\PersistentCollection {#4037 …}
  +reports: Doctrine\ORM\PersistentCollection {#4035 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4003 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4007 …}
  -id: 304323
  -bodyTs: "'bare':15 'compil':20 'could':19 'distro':34 'everyth':21 'issu':4 'less':10 'manag':36 'metal':16 'might':31 'packag':35 'probabl':26 'problem':43 'run':13 'similar':42 'sourc':23 'still':39 'sure':17 'trust':3,11,32 'won':27"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6401000"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705123297 {#3988
    date: 2024-01-13 06:21:37.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
7 DENIED edit
App\Entity\EntryComment {#4043
  +user: App\Entity\User {#3991 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "About the trust issue. There’s no more or less trust than running on bare metal. Sure you could compile everything from source but you probably won’t, and you might trust your distro package manager, but that still has a similar problem."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705123297 {#4052
    date: 2024-01-13 06:21:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4041 …}
  +nested: Doctrine\ORM\PersistentCollection {#4039 …}
  +votes: Doctrine\ORM\PersistentCollection {#4037 …}
  +reports: Doctrine\ORM\PersistentCollection {#4035 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4003 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4007 …}
  -id: 304323
  -bodyTs: "'bare':15 'compil':20 'could':19 'distro':34 'everyth':21 'issu':4 'less':10 'manag':36 'metal':16 'might':31 'packag':35 'probabl':26 'problem':43 'run':13 'similar':42 'sourc':23 'still':39 'sure':17 'trust':3,11,32 'won':27"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6401000"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705123297 {#3988
    date: 2024-01-13 06:21:37.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
8 DENIED moderate
App\Entity\EntryComment {#4043
  +user: App\Entity\User {#3991 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "About the trust issue. There’s no more or less trust than running on bare metal. Sure you could compile everything from source but you probably won’t, and you might trust your distro package manager, but that still has a similar problem."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705123297 {#4052
    date: 2024-01-13 06:21:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4041 …}
  +nested: Doctrine\ORM\PersistentCollection {#4039 …}
  +votes: Doctrine\ORM\PersistentCollection {#4037 …}
  +reports: Doctrine\ORM\PersistentCollection {#4035 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4003 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4007 …}
  -id: 304323
  -bodyTs: "'bare':15 'compil':20 'could':19 'distro':34 'everyth':21 'issu':4 'less':10 'manag':36 'metal':16 'might':31 'packag':35 'probabl':26 'problem':43 'run':13 'similar':42 'sourc':23 'still':39 'sure':17 'trust':3,11,32 'won':27"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6401000"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705123297 {#3988
    date: 2024-01-13 06:21:37.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
10 DENIED moderate
App\Entity\EntryComment {#4080
  +user: App\Entity\User {#4063 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Check out Nixos, this is like the next step of docker\n
    \n
    Ah, and a side note: docker is not fully open source
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705080132 {#4081
    date: 2024-01-12 18:22:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4078 …}
  +nested: Doctrine\ORM\PersistentCollection {#4076 …}
  +votes: Doctrine\ORM\PersistentCollection {#4074 …}
  +reports: Doctrine\ORM\PersistentCollection {#4071 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4067 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4065 …}
  -id: 302559
  -bodyTs: "'ah':12 'check':1 'docker':11,17 'fulli':20 'like':6 'next':8 'nixo':3 'note':16 'open':21 'side':15 'sourc':22 'step':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460643"
  +editedAt: DateTimeImmutable @1721860348 {#4086
    date: 2024-07-25 00:32:28.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705080132 {#4084
    date: 2024-01-12 18:22:12.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
11 DENIED edit
App\Entity\EntryComment {#4080
  +user: App\Entity\User {#4063 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Check out Nixos, this is like the next step of docker\n
    \n
    Ah, and a side note: docker is not fully open source
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705080132 {#4081
    date: 2024-01-12 18:22:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4078 …}
  +nested: Doctrine\ORM\PersistentCollection {#4076 …}
  +votes: Doctrine\ORM\PersistentCollection {#4074 …}
  +reports: Doctrine\ORM\PersistentCollection {#4071 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4067 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4065 …}
  -id: 302559
  -bodyTs: "'ah':12 'check':1 'docker':11,17 'fulli':20 'like':6 'next':8 'nixo':3 'note':16 'open':21 'side':15 'sourc':22 'step':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460643"
  +editedAt: DateTimeImmutable @1721860348 {#4086
    date: 2024-07-25 00:32:28.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705080132 {#4084
    date: 2024-01-12 18:22:12.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
12 DENIED moderate
App\Entity\EntryComment {#4080
  +user: App\Entity\User {#4063 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Check out Nixos, this is like the next step of docker\n
    \n
    Ah, and a side note: docker is not fully open source
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705080132 {#4081
    date: 2024-01-12 18:22:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4078 …}
  +nested: Doctrine\ORM\PersistentCollection {#4076 …}
  +votes: Doctrine\ORM\PersistentCollection {#4074 …}
  +reports: Doctrine\ORM\PersistentCollection {#4071 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4067 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4065 …}
  -id: 302559
  -bodyTs: "'ah':12 'check':1 'docker':11,17 'fulli':20 'like':6 'next':8 'nixo':3 'note':16 'open':21 'side':15 'sourc':22 'step':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460643"
  +editedAt: DateTimeImmutable @1721860348 {#4086
    date: 2024-07-25 00:32:28.0 +02:00
  }
  +createdAt: DateTimeImmutable @1705080132 {#4084
    date: 2024-01-12 18:22:12.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
14 DENIED moderate
App\Entity\EntryComment {#4162
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Imo, yes.\n
    \n
    - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
    - run apps without dependency hell\n
    - even if someone breaks in, they’re not in your system but in a container\n
    - have everything web facing separate from the rest\n
    - get per app resource statistics\n
    \n
    Those are just what was in my head. Probably more to be said.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1721939373 {#4156
    date: 2024-07-25 22:29:33.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4163 …}
  +nested: Doctrine\ORM\PersistentCollection {#4165 …}
  +votes: Doctrine\ORM\PersistentCollection {#4167 …}
  +reports: Doctrine\ORM\PersistentCollection {#4169 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
  -id: 298945
  -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/400498"
  +editedAt: DateTimeImmutable @1720862100 {#4157
    date: 2024-07-13 11:15:00.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704981658 {#4158
    date: 2024-01-11 15:00:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
15 DENIED edit
App\Entity\EntryComment {#4162
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Imo, yes.\n
    \n
    - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
    - run apps without dependency hell\n
    - even if someone breaks in, they’re not in your system but in a container\n
    - have everything web facing separate from the rest\n
    - get per app resource statistics\n
    \n
    Those are just what was in my head. Probably more to be said.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1721939373 {#4156
    date: 2024-07-25 22:29:33.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4163 …}
  +nested: Doctrine\ORM\PersistentCollection {#4165 …}
  +votes: Doctrine\ORM\PersistentCollection {#4167 …}
  +reports: Doctrine\ORM\PersistentCollection {#4169 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
  -id: 298945
  -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/400498"
  +editedAt: DateTimeImmutable @1720862100 {#4157
    date: 2024-07-13 11:15:00.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704981658 {#4158
    date: 2024-01-11 15:00:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
16 DENIED moderate
App\Entity\EntryComment {#4162
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Imo, yes.\n
    \n
    - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
    - run apps without dependency hell\n
    - even if someone breaks in, they’re not in your system but in a container\n
    - have everything web facing separate from the rest\n
    - get per app resource statistics\n
    \n
    Those are just what was in my head. Probably more to be said.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1721939373 {#4156
    date: 2024-07-25 22:29:33.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4163 …}
  +nested: Doctrine\ORM\PersistentCollection {#4165 …}
  +votes: Doctrine\ORM\PersistentCollection {#4167 …}
  +reports: Doctrine\ORM\PersistentCollection {#4169 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
  -id: 298945
  -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/400498"
  +editedAt: DateTimeImmutable @1720862100 {#4157
    date: 2024-07-13 11:15:00.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704981658 {#4158
    date: 2024-01-11 15:00:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
18 DENIED moderate
App\Entity\EntryComment {#5227
  +user: App\Entity\User {#4063 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4162
    +user: App\Entity\User {#4175 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4156
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4165 …}
    +votes: Doctrine\ORM\PersistentCollection {#4167 …}
    +reports: Doctrine\ORM\PersistentCollection {#4169 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4157
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4158
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705079798 {#5225
    date: 2024-01-12 18:16:38.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5228 …}
  +nested: Doctrine\ORM\PersistentCollection {#5230 …}
  +votes: Doctrine\ORM\PersistentCollection {#5232 …}
  +reports: Doctrine\ORM\PersistentCollection {#5234 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5236 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5238 …}
  -id: 302538
  -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705079798 {#5226
    date: 2024-01-12 18:16:38.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
19 DENIED edit
App\Entity\EntryComment {#5227
  +user: App\Entity\User {#4063 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4162
    +user: App\Entity\User {#4175 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4156
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4165 …}
    +votes: Doctrine\ORM\PersistentCollection {#4167 …}
    +reports: Doctrine\ORM\PersistentCollection {#4169 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4157
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4158
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705079798 {#5225
    date: 2024-01-12 18:16:38.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5228 …}
  +nested: Doctrine\ORM\PersistentCollection {#5230 …}
  +votes: Doctrine\ORM\PersistentCollection {#5232 …}
  +reports: Doctrine\ORM\PersistentCollection {#5234 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5236 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5238 …}
  -id: 302538
  -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705079798 {#5226
    date: 2024-01-12 18:16:38.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
20 DENIED moderate
App\Entity\EntryComment {#5227
  +user: App\Entity\User {#4063 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4162
    +user: App\Entity\User {#4175 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4156
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4165 …}
    +votes: Doctrine\ORM\PersistentCollection {#4167 …}
    +reports: Doctrine\ORM\PersistentCollection {#4169 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4157
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4158
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705079798 {#5225
    date: 2024-01-12 18:16:38.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5228 …}
  +nested: Doctrine\ORM\PersistentCollection {#5230 …}
  +votes: Doctrine\ORM\PersistentCollection {#5232 …}
  +reports: Doctrine\ORM\PersistentCollection {#5234 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5236 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5238 …}
  -id: 302538
  -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705079798 {#5226
    date: 2024-01-12 18:16:38.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
22 DENIED moderate
App\Entity\EntryComment {#5311
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5227
    +user: App\Entity\User {#4063 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4162
      +user: App\Entity\User {#4175 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4156
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4165 …}
      +votes: Doctrine\ORM\PersistentCollection {#4167 …}
      +reports: Doctrine\ORM\PersistentCollection {#4169 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4157
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4158
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4162}
    +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705079798 {#5225
      date: 2024-01-12 18:16:38.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5228 …}
    +nested: Doctrine\ORM\PersistentCollection {#5230 …}
    +votes: Doctrine\ORM\PersistentCollection {#5232 …}
    +reports: Doctrine\ORM\PersistentCollection {#5234 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5236 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5238 …}
    -id: 302538
    -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7460511"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705079798 {#5226
      date: 2024-01-12 18:16:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "*in that container, not in the system"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705085485 {#5309
    date: 2024-01-12 19:51:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@Gooey0210@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5312 …}
  +nested: Doctrine\ORM\PersistentCollection {#5314 …}
  +votes: Doctrine\ORM\PersistentCollection {#5316 …}
  +reports: Doctrine\ORM\PersistentCollection {#5318 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5320 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5322 …}
  -id: 302811
  -bodyTs: "'contain':3 'system':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407223"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705085485 {#5310
    date: 2024-01-12 19:51:25.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
23 DENIED edit
App\Entity\EntryComment {#5311
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5227
    +user: App\Entity\User {#4063 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4162
      +user: App\Entity\User {#4175 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4156
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4165 …}
      +votes: Doctrine\ORM\PersistentCollection {#4167 …}
      +reports: Doctrine\ORM\PersistentCollection {#4169 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4157
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4158
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4162}
    +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705079798 {#5225
      date: 2024-01-12 18:16:38.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5228 …}
    +nested: Doctrine\ORM\PersistentCollection {#5230 …}
    +votes: Doctrine\ORM\PersistentCollection {#5232 …}
    +reports: Doctrine\ORM\PersistentCollection {#5234 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5236 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5238 …}
    -id: 302538
    -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7460511"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705079798 {#5226
      date: 2024-01-12 18:16:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "*in that container, not in the system"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705085485 {#5309
    date: 2024-01-12 19:51:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@Gooey0210@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5312 …}
  +nested: Doctrine\ORM\PersistentCollection {#5314 …}
  +votes: Doctrine\ORM\PersistentCollection {#5316 …}
  +reports: Doctrine\ORM\PersistentCollection {#5318 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5320 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5322 …}
  -id: 302811
  -bodyTs: "'contain':3 'system':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407223"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705085485 {#5310
    date: 2024-01-12 19:51:25.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
24 DENIED moderate
App\Entity\EntryComment {#5311
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5227
    +user: App\Entity\User {#4063 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4162
      +user: App\Entity\User {#4175 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4156
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4165 …}
      +votes: Doctrine\ORM\PersistentCollection {#4167 …}
      +reports: Doctrine\ORM\PersistentCollection {#4169 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4157
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4158
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4162}
    +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705079798 {#5225
      date: 2024-01-12 18:16:38.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5228 …}
    +nested: Doctrine\ORM\PersistentCollection {#5230 …}
    +votes: Doctrine\ORM\PersistentCollection {#5232 …}
    +reports: Doctrine\ORM\PersistentCollection {#5234 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5236 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5238 …}
    -id: 302538
    -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7460511"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705079798 {#5226
      date: 2024-01-12 18:16:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "*in that container, not in the system"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705085485 {#5309
    date: 2024-01-12 19:51:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@Gooey0210@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5312 …}
  +nested: Doctrine\ORM\PersistentCollection {#5314 …}
  +votes: Doctrine\ORM\PersistentCollection {#5316 …}
  +reports: Doctrine\ORM\PersistentCollection {#5318 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5320 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5322 …}
  -id: 302811
  -bodyTs: "'contain':3 'system':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407223"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705085485 {#5310
    date: 2024-01-12 19:51:25.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
26 DENIED moderate
App\Entity\EntryComment {#5242
  +user: Proxies\__CG__\App\Entity\User {#5243 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4162
    +user: App\Entity\User {#4175 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4156
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4165 …}
    +votes: Doctrine\ORM\PersistentCollection {#4167 …}
    +reports: Doctrine\ORM\PersistentCollection {#4169 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4157
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4158
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1705076009 {#5240
    date: 2024-01-12 17:13:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5244 …}
  +nested: Doctrine\ORM\PersistentCollection {#5246 …}
  +votes: Doctrine\ORM\PersistentCollection {#5248 …}
  +reports: Doctrine\ORM\PersistentCollection {#5250 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5252 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5254 …}
  -id: 302315
  -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8192614"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705076009 {#5241
    date: 2024-01-12 17:13:29.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
27 DENIED edit
App\Entity\EntryComment {#5242
  +user: Proxies\__CG__\App\Entity\User {#5243 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4162
    +user: App\Entity\User {#4175 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4156
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4165 …}
    +votes: Doctrine\ORM\PersistentCollection {#4167 …}
    +reports: Doctrine\ORM\PersistentCollection {#4169 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4157
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4158
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1705076009 {#5240
    date: 2024-01-12 17:13:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5244 …}
  +nested: Doctrine\ORM\PersistentCollection {#5246 …}
  +votes: Doctrine\ORM\PersistentCollection {#5248 …}
  +reports: Doctrine\ORM\PersistentCollection {#5250 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5252 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5254 …}
  -id: 302315
  -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8192614"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705076009 {#5241
    date: 2024-01-12 17:13:29.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
28 DENIED moderate
App\Entity\EntryComment {#5242
  +user: Proxies\__CG__\App\Entity\User {#5243 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4162
    +user: App\Entity\User {#4175 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4156
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4163 …}
    +nested: Doctrine\ORM\PersistentCollection {#4165 …}
    +votes: Doctrine\ORM\PersistentCollection {#4167 …}
    +reports: Doctrine\ORM\PersistentCollection {#4169 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4157
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4158
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1705076009 {#5240
    date: 2024-01-12 17:13:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5244 …}
  +nested: Doctrine\ORM\PersistentCollection {#5246 …}
  +votes: Doctrine\ORM\PersistentCollection {#5248 …}
  +reports: Doctrine\ORM\PersistentCollection {#5250 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5252 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5254 …}
  -id: 302315
  -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8192614"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705076009 {#5241
    date: 2024-01-12 17:13:29.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
30 DENIED moderate
App\Entity\EntryComment {#5296
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5242
    +user: Proxies\__CG__\App\Entity\User {#5243 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4162
      +user: App\Entity\User {#4175 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4156
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4165 …}
      +votes: Doctrine\ORM\PersistentCollection {#4167 …}
      +reports: Doctrine\ORM\PersistentCollection {#4169 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4157
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4158
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4162}
    +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 4
    +score: 0
    +lastActive: DateTime @1705076009 {#5240
      date: 2024-01-12 17:13:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5244 …}
    +nested: Doctrine\ORM\PersistentCollection {#5246 …}
    +votes: Doctrine\ORM\PersistentCollection {#5248 …}
    +reports: Doctrine\ORM\PersistentCollection {#5250 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5252 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5254 …}
    -id: 302315
    -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8192614"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705076009 {#5241
      date: 2024-01-12 17:13:29.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "I havent actually tried that. Might need to check it out. :)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705086049 {#5294
    date: 2024-01-12 20:00:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@invertedspear@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5297 …}
  +nested: Doctrine\ORM\PersistentCollection {#5299 …}
  +votes: Doctrine\ORM\PersistentCollection {#5301 …}
  +reports: Doctrine\ORM\PersistentCollection {#5303 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5305 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5307 …}
  -id: 302847
  -bodyTs: "'actual':3 'check':9 'havent':2 'might':6 'need':7 'tri':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407281"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705086049 {#5295
    date: 2024-01-12 20:00:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
31 DENIED edit
App\Entity\EntryComment {#5296
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5242
    +user: Proxies\__CG__\App\Entity\User {#5243 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4162
      +user: App\Entity\User {#4175 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4156
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4165 …}
      +votes: Doctrine\ORM\PersistentCollection {#4167 …}
      +reports: Doctrine\ORM\PersistentCollection {#4169 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4157
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4158
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4162}
    +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 4
    +score: 0
    +lastActive: DateTime @1705076009 {#5240
      date: 2024-01-12 17:13:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5244 …}
    +nested: Doctrine\ORM\PersistentCollection {#5246 …}
    +votes: Doctrine\ORM\PersistentCollection {#5248 …}
    +reports: Doctrine\ORM\PersistentCollection {#5250 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5252 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5254 …}
    -id: 302315
    -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8192614"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705076009 {#5241
      date: 2024-01-12 17:13:29.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "I havent actually tried that. Might need to check it out. :)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705086049 {#5294
    date: 2024-01-12 20:00:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@invertedspear@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5297 …}
  +nested: Doctrine\ORM\PersistentCollection {#5299 …}
  +votes: Doctrine\ORM\PersistentCollection {#5301 …}
  +reports: Doctrine\ORM\PersistentCollection {#5303 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5305 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5307 …}
  -id: 302847
  -bodyTs: "'actual':3 'check':9 'havent':2 'might':6 'need':7 'tri':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407281"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705086049 {#5295
    date: 2024-01-12 20:00:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
32 DENIED moderate
App\Entity\EntryComment {#5296
  +user: App\Entity\User {#4175 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5242
    +user: Proxies\__CG__\App\Entity\User {#5243 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4162
      +user: App\Entity\User {#4175 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4156
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4163 …}
      +nested: Doctrine\ORM\PersistentCollection {#4165 …}
      +votes: Doctrine\ORM\PersistentCollection {#4167 …}
      +reports: Doctrine\ORM\PersistentCollection {#4169 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4171 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4173 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4157
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4158
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4162}
    +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 4
    +score: 0
    +lastActive: DateTime @1705076009 {#5240
      date: 2024-01-12 17:13:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5244 …}
    +nested: Doctrine\ORM\PersistentCollection {#5246 …}
    +votes: Doctrine\ORM\PersistentCollection {#5248 …}
    +reports: Doctrine\ORM\PersistentCollection {#5250 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5252 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5254 …}
    -id: 302315
    -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8192614"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705076009 {#5241
      date: 2024-01-12 17:13:29.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4162}
  +body: "I havent actually tried that. Might need to check it out. :)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705086049 {#5294
    date: 2024-01-12 20:00:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@invertedspear@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5297 …}
  +nested: Doctrine\ORM\PersistentCollection {#5299 …}
  +votes: Doctrine\ORM\PersistentCollection {#5301 …}
  +reports: Doctrine\ORM\PersistentCollection {#5303 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5305 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5307 …}
  -id: 302847
  -bodyTs: "'actual':3 'check':9 'havent':2 'might':6 'need':7 'tri':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407281"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705086049 {#5295
    date: 2024-01-12 20:00:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
34 DENIED moderate
App\Entity\EntryComment {#4236
  +user: App\Entity\User {#4249 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Docker is a messy and not ideal but it was born out of a necessity, getting multiple services to coexist together outside of a container can be a nightmare, updating and moving configuration is a nightmare and removing things can leave stuff behind which gets messier and messier over time. Docker just standardises most of the configuration whilst requiring minimal effort from the developer"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1704974625 {#4231
    date: 2024-01-11 13:03:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4237 …}
  +nested: Doctrine\ORM\PersistentCollection {#4239 …}
  +votes: Doctrine\ORM\PersistentCollection {#4241 …}
  +reports: Doctrine\ORM\PersistentCollection {#4243 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4245 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4247 …}
  -id: 298791
  -bodyTs: "'behind':43 'born':11 'coexist':20 'configur':33,57 'contain':25 'develop':64 'docker':1,51 'effort':61 'get':16,45 'ideal':7 'leav':41 'messi':4 'messier':46,48 'minim':60 'move':32 'multipl':17 'necess':15 'nightmar':29,36 'outsid':22 'remov':38 'requir':59 'servic':18 'standardis':53 'stuff':42 'thing':39 'time':50 'togeth':21 'updat':30 'whilst':58"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.uk/comment/5748497"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704974625 {#4232
    date: 2024-01-11 13:03:45.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
35 DENIED edit
App\Entity\EntryComment {#4236
  +user: App\Entity\User {#4249 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Docker is a messy and not ideal but it was born out of a necessity, getting multiple services to coexist together outside of a container can be a nightmare, updating and moving configuration is a nightmare and removing things can leave stuff behind which gets messier and messier over time. Docker just standardises most of the configuration whilst requiring minimal effort from the developer"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1704974625 {#4231
    date: 2024-01-11 13:03:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4237 …}
  +nested: Doctrine\ORM\PersistentCollection {#4239 …}
  +votes: Doctrine\ORM\PersistentCollection {#4241 …}
  +reports: Doctrine\ORM\PersistentCollection {#4243 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4245 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4247 …}
  -id: 298791
  -bodyTs: "'behind':43 'born':11 'coexist':20 'configur':33,57 'contain':25 'develop':64 'docker':1,51 'effort':61 'get':16,45 'ideal':7 'leav':41 'messi':4 'messier':46,48 'minim':60 'move':32 'multipl':17 'necess':15 'nightmar':29,36 'outsid':22 'remov':38 'requir':59 'servic':18 'standardis':53 'stuff':42 'thing':39 'time':50 'togeth':21 'updat':30 'whilst':58"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.uk/comment/5748497"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704974625 {#4232
    date: 2024-01-11 13:03:45.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
36 DENIED moderate
App\Entity\EntryComment {#4236
  +user: App\Entity\User {#4249 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Docker is a messy and not ideal but it was born out of a necessity, getting multiple services to coexist together outside of a container can be a nightmare, updating and moving configuration is a nightmare and removing things can leave stuff behind which gets messier and messier over time. Docker just standardises most of the configuration whilst requiring minimal effort from the developer"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1704974625 {#4231
    date: 2024-01-11 13:03:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4237 …}
  +nested: Doctrine\ORM\PersistentCollection {#4239 …}
  +votes: Doctrine\ORM\PersistentCollection {#4241 …}
  +reports: Doctrine\ORM\PersistentCollection {#4243 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4245 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4247 …}
  -id: 298791
  -bodyTs: "'behind':43 'born':11 'coexist':20 'configur':33,57 'contain':25 'develop':64 'docker':1,51 'effort':61 'get':16,45 'ideal':7 'leav':41 'messi':4 'messier':46,48 'minim':60 'move':32 'multipl':17 'necess':15 'nightmar':29,36 'outsid':22 'remov':38 'requir':59 'servic':18 'standardis':53 'stuff':42 'thing':39 'time':50 'togeth':21 'updat':30 'whilst':58"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.uk/comment/5748497"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704974625 {#4232
    date: 2024-01-11 13:03:45.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
38 DENIED moderate
App\Entity\EntryComment {#4310
  +user: App\Entity\User {#4323 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Life is too short to install everything on baremetal."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721731699 {#4305
    date: 2024-07-23 12:48:19.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4311 …}
  +nested: Doctrine\ORM\PersistentCollection {#4313 …}
  +votes: Doctrine\ORM\PersistentCollection {#4315 …}
  +reports: Doctrine\ORM\PersistentCollection {#4317 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
  -id: 298599
  -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6574648"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964972 {#4306
    date: 2024-01-11 10:22:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
39 DENIED edit
App\Entity\EntryComment {#4310
  +user: App\Entity\User {#4323 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Life is too short to install everything on baremetal."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721731699 {#4305
    date: 2024-07-23 12:48:19.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4311 …}
  +nested: Doctrine\ORM\PersistentCollection {#4313 …}
  +votes: Doctrine\ORM\PersistentCollection {#4315 …}
  +reports: Doctrine\ORM\PersistentCollection {#4317 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
  -id: 298599
  -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6574648"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964972 {#4306
    date: 2024-01-11 10:22:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
40 DENIED moderate
App\Entity\EntryComment {#4310
  +user: App\Entity\User {#4323 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Life is too short to install everything on baremetal."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721731699 {#4305
    date: 2024-07-23 12:48:19.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4311 …}
  +nested: Doctrine\ORM\PersistentCollection {#4313 …}
  +votes: Doctrine\ORM\PersistentCollection {#4315 …}
  +reports: Doctrine\ORM\PersistentCollection {#4317 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
  -id: 298599
  -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6574648"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964972 {#4306
    date: 2024-01-11 10:22:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
41 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
42 DENIED moderate
App\Entity\EntryComment {#5211
  +user: Proxies\__CG__\App\Entity\User {#5212 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4310
    +user: App\Entity\User {#4323 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Life is too short to install everything on baremetal."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721731699 {#4305
      date: 2024-07-23 12:48:19.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4311 …}
    +nested: Doctrine\ORM\PersistentCollection {#4313 …}
    +votes: Doctrine\ORM\PersistentCollection {#4315 …}
    +reports: Doctrine\ORM\PersistentCollection {#4317 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
    -id: 298599
    -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6574648"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964972 {#4306
      date: 2024-01-11 10:22:52.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4310}
  +body: "For real, at the minimum use a virtual machine."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1705052625 {#5209
    date: 2024-01-12 10:43:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5213 …}
  +nested: Doctrine\ORM\PersistentCollection {#5215 …}
  +votes: Doctrine\ORM\PersistentCollection {#5217 …}
  +reports: Doctrine\ORM\PersistentCollection {#5219 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5221 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5223 …}
  -id: 301523
  -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6374060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705052625 {#5210
    date: 2024-01-12 10:43:45.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
43 DENIED edit
App\Entity\EntryComment {#5211
  +user: Proxies\__CG__\App\Entity\User {#5212 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4310
    +user: App\Entity\User {#4323 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Life is too short to install everything on baremetal."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721731699 {#4305
      date: 2024-07-23 12:48:19.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4311 …}
    +nested: Doctrine\ORM\PersistentCollection {#4313 …}
    +votes: Doctrine\ORM\PersistentCollection {#4315 …}
    +reports: Doctrine\ORM\PersistentCollection {#4317 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
    -id: 298599
    -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6574648"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964972 {#4306
      date: 2024-01-11 10:22:52.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4310}
  +body: "For real, at the minimum use a virtual machine."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1705052625 {#5209
    date: 2024-01-12 10:43:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5213 …}
  +nested: Doctrine\ORM\PersistentCollection {#5215 …}
  +votes: Doctrine\ORM\PersistentCollection {#5217 …}
  +reports: Doctrine\ORM\PersistentCollection {#5219 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5221 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5223 …}
  -id: 301523
  -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6374060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705052625 {#5210
    date: 2024-01-12 10:43:45.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
44 DENIED moderate
App\Entity\EntryComment {#5211
  +user: Proxies\__CG__\App\Entity\User {#5212 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4310
    +user: App\Entity\User {#4323 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Life is too short to install everything on baremetal."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721731699 {#4305
      date: 2024-07-23 12:48:19.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4311 …}
    +nested: Doctrine\ORM\PersistentCollection {#4313 …}
    +votes: Doctrine\ORM\PersistentCollection {#4315 …}
    +reports: Doctrine\ORM\PersistentCollection {#4317 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
    -id: 298599
    -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6574648"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964972 {#4306
      date: 2024-01-11 10:22:52.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4310}
  +body: "For real, at the minimum use a virtual machine."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1705052625 {#5209
    date: 2024-01-12 10:43:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5213 …}
  +nested: Doctrine\ORM\PersistentCollection {#5215 …}
  +votes: Doctrine\ORM\PersistentCollection {#5217 …}
  +reports: Doctrine\ORM\PersistentCollection {#5219 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5221 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5223 …}
  -id: 301523
  -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6374060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705052625 {#5210
    date: 2024-01-12 10:43:45.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
45 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
46 DENIED moderate
App\Entity\EntryComment {#5280
  +user: Proxies\__CG__\App\Entity\User {#5281 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5211
    +user: Proxies\__CG__\App\Entity\User {#5212 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4310
      +user: App\Entity\User {#4323 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Life is too short to install everything on baremetal."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 33
      +score: 0
      +lastActive: DateTime @1721731699 {#4305
        date: 2024-07-23 12:48:19.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4311 …}
      +nested: Doctrine\ORM\PersistentCollection {#4313 …}
      +votes: Doctrine\ORM\PersistentCollection {#4315 …}
      +reports: Doctrine\ORM\PersistentCollection {#4317 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
      -id: 298599
      -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6574648"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704964972 {#4306
        date: 2024-01-11 10:22:52.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4310}
    +body: "For real, at the minimum use a virtual machine."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1705052625 {#5209
      date: 2024-01-12 10:43:45.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@shalva97@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5213 …}
    +nested: Doctrine\ORM\PersistentCollection {#5215 …}
    +votes: Doctrine\ORM\PersistentCollection {#5217 …}
    +reports: Doctrine\ORM\PersistentCollection {#5219 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5221 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5223 …}
    -id: 301523
    -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6374060"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705052625 {#5210
      date: 2024-01-12 10:43:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4310}
  +body: "Use lxc/lxd to get all of the performance benefits of docker and all the freedom of a vm"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705070754 {#5278
    date: 2024-01-12 15:45:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
    "@purplemonkeymad@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5282 …}
  +nested: Doctrine\ORM\PersistentCollection {#5284 …}
  +votes: Doctrine\ORM\PersistentCollection {#5286 …}
  +reports: Doctrine\ORM\PersistentCollection {#5288 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5290 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5292 …}
  -id: 302106
  -bodyTs: "'benefit':9 'docker':11 'freedom':15 'get':4 'lxc/lxd':2 'perform':8 'use':1 'vm':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8190509"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705070754 {#5279
    date: 2024-01-12 15:45:54.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
47 DENIED edit
App\Entity\EntryComment {#5280
  +user: Proxies\__CG__\App\Entity\User {#5281 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5211
    +user: Proxies\__CG__\App\Entity\User {#5212 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4310
      +user: App\Entity\User {#4323 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Life is too short to install everything on baremetal."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 33
      +score: 0
      +lastActive: DateTime @1721731699 {#4305
        date: 2024-07-23 12:48:19.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4311 …}
      +nested: Doctrine\ORM\PersistentCollection {#4313 …}
      +votes: Doctrine\ORM\PersistentCollection {#4315 …}
      +reports: Doctrine\ORM\PersistentCollection {#4317 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
      -id: 298599
      -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6574648"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704964972 {#4306
        date: 2024-01-11 10:22:52.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4310}
    +body: "For real, at the minimum use a virtual machine."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1705052625 {#5209
      date: 2024-01-12 10:43:45.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@shalva97@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5213 …}
    +nested: Doctrine\ORM\PersistentCollection {#5215 …}
    +votes: Doctrine\ORM\PersistentCollection {#5217 …}
    +reports: Doctrine\ORM\PersistentCollection {#5219 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5221 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5223 …}
    -id: 301523
    -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6374060"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705052625 {#5210
      date: 2024-01-12 10:43:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4310}
  +body: "Use lxc/lxd to get all of the performance benefits of docker and all the freedom of a vm"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705070754 {#5278
    date: 2024-01-12 15:45:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
    "@purplemonkeymad@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5282 …}
  +nested: Doctrine\ORM\PersistentCollection {#5284 …}
  +votes: Doctrine\ORM\PersistentCollection {#5286 …}
  +reports: Doctrine\ORM\PersistentCollection {#5288 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5290 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5292 …}
  -id: 302106
  -bodyTs: "'benefit':9 'docker':11 'freedom':15 'get':4 'lxc/lxd':2 'perform':8 'use':1 'vm':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8190509"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705070754 {#5279
    date: 2024-01-12 15:45:54.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
48 DENIED moderate
App\Entity\EntryComment {#5280
  +user: Proxies\__CG__\App\Entity\User {#5281 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5211
    +user: Proxies\__CG__\App\Entity\User {#5212 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4310
      +user: App\Entity\User {#4323 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Life is too short to install everything on baremetal."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 33
      +score: 0
      +lastActive: DateTime @1721731699 {#4305
        date: 2024-07-23 12:48:19.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4311 …}
      +nested: Doctrine\ORM\PersistentCollection {#4313 …}
      +votes: Doctrine\ORM\PersistentCollection {#4315 …}
      +reports: Doctrine\ORM\PersistentCollection {#4317 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4319 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4321 …}
      -id: 298599
      -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6574648"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704964972 {#4306
        date: 2024-01-11 10:22:52.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4310}
    +body: "For real, at the minimum use a virtual machine."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1705052625 {#5209
      date: 2024-01-12 10:43:45.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@shalva97@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5213 …}
    +nested: Doctrine\ORM\PersistentCollection {#5215 …}
    +votes: Doctrine\ORM\PersistentCollection {#5217 …}
    +reports: Doctrine\ORM\PersistentCollection {#5219 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5221 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5223 …}
    -id: 301523
    -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6374060"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705052625 {#5210
      date: 2024-01-12 10:43:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4310}
  +body: "Use lxc/lxd to get all of the performance benefits of docker and all the freedom of a vm"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705070754 {#5278
    date: 2024-01-12 15:45:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
    "@purplemonkeymad@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5282 …}
  +nested: Doctrine\ORM\PersistentCollection {#5284 …}
  +votes: Doctrine\ORM\PersistentCollection {#5286 …}
  +reports: Doctrine\ORM\PersistentCollection {#5288 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5290 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5292 …}
  -id: 302106
  -bodyTs: "'benefit':9 'docker':11 'freedom':15 'get':4 'lxc/lxd':2 'perform':8 'use':1 'vm':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8190509"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705070754 {#5279
    date: 2024-01-12 15:45:54.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
49 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
50 DENIED moderate
App\Entity\EntryComment {#4383
  +user: App\Entity\User {#4396 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Because if you use relative bind mounts you can move a whole docker compose set of contaibera to a new host with docker compose stop then rsync it over then docker compose up -d.\n
    \n
    Portability and backup are dead simple.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704959042 {#4378
    date: 2024-01-11 08:44:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4384 …}
  +nested: Doctrine\ORM\PersistentCollection {#4386 …}
  +votes: Doctrine\ORM\PersistentCollection {#4388 …}
  +reports: Doctrine\ORM\PersistentCollection {#4390 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4392 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4394 …}
  -id: 298495
  -bodyTs: "'backup':37 'bind':6 'compos':14,24,32 'contaibera':17 'd':34 'dead':39 'docker':13,23,31 'host':21 'mount':7 'move':10 'new':20 'portabl':35 'relat':5 'rsync':27 'set':15 'simpl':40 'stop':25 'use':4 'whole':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6573306"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959042 {#4379
    date: 2024-01-11 08:44:02.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
51 DENIED edit
App\Entity\EntryComment {#4383
  +user: App\Entity\User {#4396 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Because if you use relative bind mounts you can move a whole docker compose set of contaibera to a new host with docker compose stop then rsync it over then docker compose up -d.\n
    \n
    Portability and backup are dead simple.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704959042 {#4378
    date: 2024-01-11 08:44:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4384 …}
  +nested: Doctrine\ORM\PersistentCollection {#4386 …}
  +votes: Doctrine\ORM\PersistentCollection {#4388 …}
  +reports: Doctrine\ORM\PersistentCollection {#4390 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4392 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4394 …}
  -id: 298495
  -bodyTs: "'backup':37 'bind':6 'compos':14,24,32 'contaibera':17 'd':34 'dead':39 'docker':13,23,31 'host':21 'mount':7 'move':10 'new':20 'portabl':35 'relat':5 'rsync':27 'set':15 'simpl':40 'stop':25 'use':4 'whole':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6573306"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959042 {#4379
    date: 2024-01-11 08:44:02.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
52 DENIED moderate
App\Entity\EntryComment {#4383
  +user: App\Entity\User {#4396 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Because if you use relative bind mounts you can move a whole docker compose set of contaibera to a new host with docker compose stop then rsync it over then docker compose up -d.\n
    \n
    Portability and backup are dead simple.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704959042 {#4378
    date: 2024-01-11 08:44:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4384 …}
  +nested: Doctrine\ORM\PersistentCollection {#4386 …}
  +votes: Doctrine\ORM\PersistentCollection {#4388 …}
  +reports: Doctrine\ORM\PersistentCollection {#4390 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4392 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4394 …}
  -id: 298495
  -bodyTs: "'backup':37 'bind':6 'compos':14,24,32 'contaibera':17 'd':34 'dead':39 'docker':13,23,31 'host':21 'mount':7 'move':10 'new':20 'portabl':35 'relat':5 'rsync':27 'set':15 'simpl':40 'stop':25 'use':4 'whole':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6573306"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959042 {#4379
    date: 2024-01-11 08:44:02.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
53 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
54 DENIED moderate
App\Entity\EntryComment {#4456
  +user: App\Entity\User {#4469 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    people are rebuffing the criticism already.\n
    \n
    heres the main advantage imo:\n
    \n
    no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
    \n
    docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
    \n
    much easier to maintain once you get the hang of things.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721775014 {#4451
    date: 2024-07-24 00:50:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4457 …}
  +nested: Doctrine\ORM\PersistentCollection {#4459 …}
  +votes: Doctrine\ORM\PersistentCollection {#4461 …}
  +reports: Doctrine\ORM\PersistentCollection {#4463 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4465 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4467 …}
  -id: 297786
  -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7241901"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704931562 {#4452
    date: 2024-01-11 01:06:02.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
55 DENIED edit
App\Entity\EntryComment {#4456
  +user: App\Entity\User {#4469 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    people are rebuffing the criticism already.\n
    \n
    heres the main advantage imo:\n
    \n
    no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
    \n
    docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
    \n
    much easier to maintain once you get the hang of things.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721775014 {#4451
    date: 2024-07-24 00:50:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4457 …}
  +nested: Doctrine\ORM\PersistentCollection {#4459 …}
  +votes: Doctrine\ORM\PersistentCollection {#4461 …}
  +reports: Doctrine\ORM\PersistentCollection {#4463 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4465 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4467 …}
  -id: 297786
  -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7241901"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704931562 {#4452
    date: 2024-01-11 01:06:02.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
56 DENIED moderate
App\Entity\EntryComment {#4456
  +user: App\Entity\User {#4469 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    people are rebuffing the criticism already.\n
    \n
    heres the main advantage imo:\n
    \n
    no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
    \n
    docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
    \n
    much easier to maintain once you get the hang of things.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721775014 {#4451
    date: 2024-07-24 00:50:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4457 …}
  +nested: Doctrine\ORM\PersistentCollection {#4459 …}
  +votes: Doctrine\ORM\PersistentCollection {#4461 …}
  +reports: Doctrine\ORM\PersistentCollection {#4463 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4465 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4467 …}
  -id: 297786
  -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7241901"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704931562 {#4452
    date: 2024-01-11 01:06:02.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
57 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
58 DENIED moderate
App\Entity\EntryComment {#5195
  +user: Proxies\__CG__\App\Entity\User {#5196 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4456
    +user: App\Entity\User {#4469 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      people are rebuffing the criticism already.\n
      \n
      heres the main advantage imo:\n
      \n
      no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
      \n
      docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
      \n
      much easier to maintain once you get the hang of things.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721775014 {#4451
      date: 2024-07-24 00:50:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4457 …}
    +nested: Doctrine\ORM\PersistentCollection {#4459 …}
    +votes: Doctrine\ORM\PersistentCollection {#4461 …}
    +reports: Doctrine\ORM\PersistentCollection {#4463 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4465 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4467 …}
    -id: 297786
    -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7241901"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704931562 {#4452
      date: 2024-01-11 01:06:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4456}
  +body: "Quick addition, I think for the messy argument the way I would articulate it for folks running servers is it helps you move from [pets to cattle.](https://devops.stackexchange.com/a/654)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705074594 {#5193
    date: 2024-01-12 16:49:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@umbrella@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5197 …}
  +nested: Doctrine\ORM\PersistentCollection {#5199 …}
  +votes: Doctrine\ORM\PersistentCollection {#5201 …}
  +reports: Doctrine\ORM\PersistentCollection {#5203 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5205 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5207 …}
  -id: 302268
  -bodyTs: "'/a/654)':30 'addit':2 'argument':8 'articul':13 'cattl':27 'devops.stackexchange.com':29 'devops.stackexchange.com/a/654)':28 'folk':16 'help':21 'messi':7 'move':23 'pet':25 'quick':1 'run':17 'server':18 'think':4 'way':10 'would':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6623711"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705074594 {#5194
    date: 2024-01-12 16:49:54.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
59 DENIED edit
App\Entity\EntryComment {#5195
  +user: Proxies\__CG__\App\Entity\User {#5196 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4456
    +user: App\Entity\User {#4469 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      people are rebuffing the criticism already.\n
      \n
      heres the main advantage imo:\n
      \n
      no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
      \n
      docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
      \n
      much easier to maintain once you get the hang of things.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721775014 {#4451
      date: 2024-07-24 00:50:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4457 …}
    +nested: Doctrine\ORM\PersistentCollection {#4459 …}
    +votes: Doctrine\ORM\PersistentCollection {#4461 …}
    +reports: Doctrine\ORM\PersistentCollection {#4463 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4465 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4467 …}
    -id: 297786
    -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7241901"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704931562 {#4452
      date: 2024-01-11 01:06:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4456}
  +body: "Quick addition, I think for the messy argument the way I would articulate it for folks running servers is it helps you move from [pets to cattle.](https://devops.stackexchange.com/a/654)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705074594 {#5193
    date: 2024-01-12 16:49:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@umbrella@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5197 …}
  +nested: Doctrine\ORM\PersistentCollection {#5199 …}
  +votes: Doctrine\ORM\PersistentCollection {#5201 …}
  +reports: Doctrine\ORM\PersistentCollection {#5203 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5205 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5207 …}
  -id: 302268
  -bodyTs: "'/a/654)':30 'addit':2 'argument':8 'articul':13 'cattl':27 'devops.stackexchange.com':29 'devops.stackexchange.com/a/654)':28 'folk':16 'help':21 'messi':7 'move':23 'pet':25 'quick':1 'run':17 'server':18 'think':4 'way':10 'would':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6623711"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705074594 {#5194
    date: 2024-01-12 16:49:54.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
60 DENIED moderate
App\Entity\EntryComment {#5195
  +user: Proxies\__CG__\App\Entity\User {#5196 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4456
    +user: App\Entity\User {#4469 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      people are rebuffing the criticism already.\n
      \n
      heres the main advantage imo:\n
      \n
      no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
      \n
      docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
      \n
      much easier to maintain once you get the hang of things.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721775014 {#4451
      date: 2024-07-24 00:50:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4457 …}
    +nested: Doctrine\ORM\PersistentCollection {#4459 …}
    +votes: Doctrine\ORM\PersistentCollection {#4461 …}
    +reports: Doctrine\ORM\PersistentCollection {#4463 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4465 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4467 …}
    -id: 297786
    -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7241901"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704931562 {#4452
      date: 2024-01-11 01:06:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4456}
  +body: "Quick addition, I think for the messy argument the way I would articulate it for folks running servers is it helps you move from [pets to cattle.](https://devops.stackexchange.com/a/654)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705074594 {#5193
    date: 2024-01-12 16:49:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@umbrella@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5197 …}
  +nested: Doctrine\ORM\PersistentCollection {#5199 …}
  +votes: Doctrine\ORM\PersistentCollection {#5201 …}
  +reports: Doctrine\ORM\PersistentCollection {#5203 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5205 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5207 …}
  -id: 302268
  -bodyTs: "'/a/654)':30 'addit':2 'argument':8 'articul':13 'cattl':27 'devops.stackexchange.com':29 'devops.stackexchange.com/a/654)':28 'folk':16 'help':21 'messi':7 'move':23 'pet':25 'quick':1 'run':17 'server':18 'think':4 'way':10 'would':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6623711"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705074594 {#5194
    date: 2024-01-12 16:49:54.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
61 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
62 DENIED moderate
App\Entity\EntryComment {#4530
  +user: App\Entity\User {#4543 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Well docker tends to be more secure if you configure it right. As far as images go it really is just a matter of getting your images from official sources. If there isn’t a image already available you can make one.\n
    \n
    The big advantage to containers is that they are highly reproducible. You no longer need to worry about issues that arise when running on the host directly.\n
    \n
    Also if you are looking for a container runtime that runs as a local user you should check out podman. Podman works very similarly to docker and can even run your containers as a systemd user service.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1704930880 {#4525
    date: 2024-01-11 00:54:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4531 …}
  +nested: Doctrine\ORM\PersistentCollection {#4533 …}
  +votes: Doctrine\ORM\PersistentCollection {#4535 …}
  +reports: Doctrine\ORM\PersistentCollection {#4537 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4539 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4541 …}
  -id: 297761
  -bodyTs: "'advantag':45 'alreadi':37 'also':70 'aris':63 'avail':38 'big':44 'check':87 'configur':10 'contain':47,77,101 'direct':69 'docker':2,95 'even':98 'far':14 'get':25 'go':17 'high':52 'host':68 'imag':16,27,36 'isn':33 'issu':61 'local':83 'longer':56 'look':74 'make':41 'matter':23 'need':57 'offici':29 'one':42 'podman':89,90 'realli':19 'reproduc':53 'right':12 'run':65,80,99 'runtim':78 'secur':7 'servic':106 'similar':93 'sourc':30 'systemd':104 'tend':3 'user':84,105 'well':1 'work':91 'worri':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/6163657"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704930880 {#4526
    date: 2024-01-11 00:54:40.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
63 DENIED edit
App\Entity\EntryComment {#4530
  +user: App\Entity\User {#4543 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Well docker tends to be more secure if you configure it right. As far as images go it really is just a matter of getting your images from official sources. If there isn’t a image already available you can make one.\n
    \n
    The big advantage to containers is that they are highly reproducible. You no longer need to worry about issues that arise when running on the host directly.\n
    \n
    Also if you are looking for a container runtime that runs as a local user you should check out podman. Podman works very similarly to docker and can even run your containers as a systemd user service.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1704930880 {#4525
    date: 2024-01-11 00:54:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4531 …}
  +nested: Doctrine\ORM\PersistentCollection {#4533 …}
  +votes: Doctrine\ORM\PersistentCollection {#4535 …}
  +reports: Doctrine\ORM\PersistentCollection {#4537 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4539 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4541 …}
  -id: 297761
  -bodyTs: "'advantag':45 'alreadi':37 'also':70 'aris':63 'avail':38 'big':44 'check':87 'configur':10 'contain':47,77,101 'direct':69 'docker':2,95 'even':98 'far':14 'get':25 'go':17 'high':52 'host':68 'imag':16,27,36 'isn':33 'issu':61 'local':83 'longer':56 'look':74 'make':41 'matter':23 'need':57 'offici':29 'one':42 'podman':89,90 'realli':19 'reproduc':53 'right':12 'run':65,80,99 'runtim':78 'secur':7 'servic':106 'similar':93 'sourc':30 'systemd':104 'tend':3 'user':84,105 'well':1 'work':91 'worri':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/6163657"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704930880 {#4526
    date: 2024-01-11 00:54:40.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
64 DENIED moderate
App\Entity\EntryComment {#4530
  +user: App\Entity\User {#4543 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Well docker tends to be more secure if you configure it right. As far as images go it really is just a matter of getting your images from official sources. If there isn’t a image already available you can make one.\n
    \n
    The big advantage to containers is that they are highly reproducible. You no longer need to worry about issues that arise when running on the host directly.\n
    \n
    Also if you are looking for a container runtime that runs as a local user you should check out podman. Podman works very similarly to docker and can even run your containers as a systemd user service.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1704930880 {#4525
    date: 2024-01-11 00:54:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4531 …}
  +nested: Doctrine\ORM\PersistentCollection {#4533 …}
  +votes: Doctrine\ORM\PersistentCollection {#4535 …}
  +reports: Doctrine\ORM\PersistentCollection {#4537 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4539 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4541 …}
  -id: 297761
  -bodyTs: "'advantag':45 'alreadi':37 'also':70 'aris':63 'avail':38 'big':44 'check':87 'configur':10 'contain':47,77,101 'direct':69 'docker':2,95 'even':98 'far':14 'get':25 'go':17 'high':52 'host':68 'imag':16,27,36 'isn':33 'issu':61 'local':83 'longer':56 'look':74 'make':41 'matter':23 'need':57 'offici':29 'one':42 'podman':89,90 'realli':19 'reproduc':53 'right':12 'run':65,80,99 'runtim':78 'secur':7 'servic':106 'similar':93 'sourc':30 'systemd':104 'tend':3 'user':84,105 'well':1 'work':91 'worri':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/6163657"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704930880 {#4526
    date: 2024-01-11 00:54:40.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
65 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
66 DENIED moderate
App\Entity\EntryComment {#4603
  +user: App\Entity\User {#4616 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
    \n
    The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
    \n
    If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
    \n
    Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
    \n
    Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
    \n
    Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1720532755 {#4598
    date: 2024-07-09 15:45:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4604 …}
  +nested: Doctrine\ORM\PersistentCollection {#4606 …}
  +votes: Doctrine\ORM\PersistentCollection {#4608 …}
  +reports: Doctrine\ORM\PersistentCollection {#4610 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4612 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4614 …}
  -id: 297660
  -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4826104"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928662 {#4599
    date: 2024-01-11 00:17:42.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
67 DENIED edit
App\Entity\EntryComment {#4603
  +user: App\Entity\User {#4616 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
    \n
    The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
    \n
    If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
    \n
    Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
    \n
    Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
    \n
    Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1720532755 {#4598
    date: 2024-07-09 15:45:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4604 …}
  +nested: Doctrine\ORM\PersistentCollection {#4606 …}
  +votes: Doctrine\ORM\PersistentCollection {#4608 …}
  +reports: Doctrine\ORM\PersistentCollection {#4610 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4612 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4614 …}
  -id: 297660
  -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4826104"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928662 {#4599
    date: 2024-01-11 00:17:42.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
68 DENIED moderate
App\Entity\EntryComment {#4603
  +user: App\Entity\User {#4616 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
    \n
    The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
    \n
    If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
    \n
    Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
    \n
    Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
    \n
    Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1720532755 {#4598
    date: 2024-07-09 15:45:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4604 …}
  +nested: Doctrine\ORM\PersistentCollection {#4606 …}
  +votes: Doctrine\ORM\PersistentCollection {#4608 …}
  +reports: Doctrine\ORM\PersistentCollection {#4610 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4612 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4614 …}
  -id: 297660
  -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4826104"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928662 {#4599
    date: 2024-01-11 00:17:42.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
69 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
70 DENIED moderate
App\Entity\EntryComment {#5179
  +user: Proxies\__CG__\App\Entity\User {#5180 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4603
    +user: App\Entity\User {#4616 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
      \n
      The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
      \n
      If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
      \n
      Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
      \n
      Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
      \n
      Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1720532755 {#4598
      date: 2024-07-09 15:45:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4604 …}
    +nested: Doctrine\ORM\PersistentCollection {#4606 …}
    +votes: Doctrine\ORM\PersistentCollection {#4608 …}
    +reports: Doctrine\ORM\PersistentCollection {#4610 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4612 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4614 …}
    -id: 297660
    -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4826104"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704928662 {#4599
      date: 2024-01-11 00:17:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4603}
  +body: "> the program is run* as root"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704942175 {#5177
    date: 2024-01-11 04:02:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Moonrise2473@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5181 …}
  +nested: Doctrine\ORM\PersistentCollection {#5183 …}
  +votes: Doctrine\ORM\PersistentCollection {#5185 …}
  +reports: Doctrine\ORM\PersistentCollection {#5187 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5189 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5191 …}
  -id: 298121
  -bodyTs: "'program':2 'root':6 'run':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6569069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704942175 {#5178
    date: 2024-01-11 04:02:55.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
71 DENIED edit
App\Entity\EntryComment {#5179
  +user: Proxies\__CG__\App\Entity\User {#5180 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4603
    +user: App\Entity\User {#4616 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
      \n
      The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
      \n
      If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
      \n
      Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
      \n
      Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
      \n
      Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1720532755 {#4598
      date: 2024-07-09 15:45:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4604 …}
    +nested: Doctrine\ORM\PersistentCollection {#4606 …}
    +votes: Doctrine\ORM\PersistentCollection {#4608 …}
    +reports: Doctrine\ORM\PersistentCollection {#4610 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4612 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4614 …}
    -id: 297660
    -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4826104"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704928662 {#4599
      date: 2024-01-11 00:17:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4603}
  +body: "> the program is run* as root"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704942175 {#5177
    date: 2024-01-11 04:02:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Moonrise2473@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5181 …}
  +nested: Doctrine\ORM\PersistentCollection {#5183 …}
  +votes: Doctrine\ORM\PersistentCollection {#5185 …}
  +reports: Doctrine\ORM\PersistentCollection {#5187 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5189 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5191 …}
  -id: 298121
  -bodyTs: "'program':2 'root':6 'run':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6569069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704942175 {#5178
    date: 2024-01-11 04:02:55.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
72 DENIED moderate
App\Entity\EntryComment {#5179
  +user: Proxies\__CG__\App\Entity\User {#5180 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4603
    +user: App\Entity\User {#4616 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
      \n
      The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
      \n
      If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
      \n
      Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
      \n
      Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
      \n
      Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1720532755 {#4598
      date: 2024-07-09 15:45:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4604 …}
    +nested: Doctrine\ORM\PersistentCollection {#4606 …}
    +votes: Doctrine\ORM\PersistentCollection {#4608 …}
    +reports: Doctrine\ORM\PersistentCollection {#4610 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4612 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4614 …}
    -id: 297660
    -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4826104"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704928662 {#4599
      date: 2024-01-11 00:17:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4603}
  +body: "> the program is run* as root"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704942175 {#5177
    date: 2024-01-11 04:02:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Moonrise2473@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5181 …}
  +nested: Doctrine\ORM\PersistentCollection {#5183 …}
  +votes: Doctrine\ORM\PersistentCollection {#5185 …}
  +reports: Doctrine\ORM\PersistentCollection {#5187 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5189 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5191 …}
  -id: 298121
  -bodyTs: "'program':2 'root':6 'run':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6569069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704942175 {#5178
    date: 2024-01-11 04:02:55.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
73 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
74 DENIED moderate
App\Entity\EntryComment {#4676
  +user: App\Entity\User {#4689 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have VMs on my metal, one specific for containers.\n
    \n
    Though I use LXC. Docker started with LXC, then grew bigger, and I don’t like how big it is.\n
    \n
    If I can set up one simple NAT and run everything inside a container, I don’t need Docker.\n
    \n
    Docker’s main advantage is the hub.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704928613 {#4671
    date: 2024-01-11 00:16:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4677 …}
  +nested: Doctrine\ORM\PersistentCollection {#4679 …}
  +votes: Doctrine\ORM\PersistentCollection {#4681 …}
  +reports: Doctrine\ORM\PersistentCollection {#4683 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4685 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4687 …}
  -id: 297655
  -bodyTs: "'advantag':53 'big':28 'bigger':21 'contain':10,44 'docker':15,49,50 'everyth':41 'grew':20 'hub':56 'insid':42 'like':26 'lxc':14,18 'main':52 'metal':6 'nat':38 'need':48 'one':7,36 'run':40 'set':34 'simpl':37 'specif':8 'start':16 'though':11 'use':13 'vms':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6317079"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928613 {#4672
    date: 2024-01-11 00:16:53.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
75 DENIED edit
App\Entity\EntryComment {#4676
  +user: App\Entity\User {#4689 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have VMs on my metal, one specific for containers.\n
    \n
    Though I use LXC. Docker started with LXC, then grew bigger, and I don’t like how big it is.\n
    \n
    If I can set up one simple NAT and run everything inside a container, I don’t need Docker.\n
    \n
    Docker’s main advantage is the hub.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704928613 {#4671
    date: 2024-01-11 00:16:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4677 …}
  +nested: Doctrine\ORM\PersistentCollection {#4679 …}
  +votes: Doctrine\ORM\PersistentCollection {#4681 …}
  +reports: Doctrine\ORM\PersistentCollection {#4683 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4685 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4687 …}
  -id: 297655
  -bodyTs: "'advantag':53 'big':28 'bigger':21 'contain':10,44 'docker':15,49,50 'everyth':41 'grew':20 'hub':56 'insid':42 'like':26 'lxc':14,18 'main':52 'metal':6 'nat':38 'need':48 'one':7,36 'run':40 'set':34 'simpl':37 'specif':8 'start':16 'though':11 'use':13 'vms':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6317079"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928613 {#4672
    date: 2024-01-11 00:16:53.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
76 DENIED moderate
App\Entity\EntryComment {#4676
  +user: App\Entity\User {#4689 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have VMs on my metal, one specific for containers.\n
    \n
    Though I use LXC. Docker started with LXC, then grew bigger, and I don’t like how big it is.\n
    \n
    If I can set up one simple NAT and run everything inside a container, I don’t need Docker.\n
    \n
    Docker’s main advantage is the hub.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704928613 {#4671
    date: 2024-01-11 00:16:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4677 …}
  +nested: Doctrine\ORM\PersistentCollection {#4679 …}
  +votes: Doctrine\ORM\PersistentCollection {#4681 …}
  +reports: Doctrine\ORM\PersistentCollection {#4683 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4685 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4687 …}
  -id: 297655
  -bodyTs: "'advantag':53 'big':28 'bigger':21 'contain':10,44 'docker':15,49,50 'everyth':41 'grew':20 'hub':56 'insid':42 'like':26 'lxc':14,18 'main':52 'metal':6 'nat':38 'need':48 'one':7,36 'run':40 'set':34 'simpl':37 'specif':8 'start':16 'though':11 'use':13 'vms':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6317079"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928613 {#4672
    date: 2024-01-11 00:16:53.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
77 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
78 DENIED moderate
App\Entity\EntryComment {#4749
  +user: App\Entity\User {#4762 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "In short, **yes,** yes it’s worth it."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1704923989 {#4744
    date: 2024-01-10 22:59:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4750 …}
  +nested: Doctrine\ORM\PersistentCollection {#4752 …}
  +votes: Doctrine\ORM\PersistentCollection {#4754 …}
  +reports: Doctrine\ORM\PersistentCollection {#4756 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4758 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4760 …}
  -id: 297392
  -bodyTs: "'short':2 'worth':7 'yes':3,4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6233495"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704923989 {#4745
    date: 2024-01-10 22:59:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
79 DENIED edit
App\Entity\EntryComment {#4749
  +user: App\Entity\User {#4762 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "In short, **yes,** yes it’s worth it."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1704923989 {#4744
    date: 2024-01-10 22:59:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4750 …}
  +nested: Doctrine\ORM\PersistentCollection {#4752 …}
  +votes: Doctrine\ORM\PersistentCollection {#4754 …}
  +reports: Doctrine\ORM\PersistentCollection {#4756 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4758 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4760 …}
  -id: 297392
  -bodyTs: "'short':2 'worth':7 'yes':3,4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6233495"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704923989 {#4745
    date: 2024-01-10 22:59:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
80 DENIED moderate
App\Entity\EntryComment {#4749
  +user: App\Entity\User {#4762 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "In short, **yes,** yes it’s worth it."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1704923989 {#4744
    date: 2024-01-10 22:59:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4750 …}
  +nested: Doctrine\ORM\PersistentCollection {#4752 …}
  +votes: Doctrine\ORM\PersistentCollection {#4754 …}
  +reports: Doctrine\ORM\PersistentCollection {#4756 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4758 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4760 …}
  -id: 297392
  -bodyTs: "'short':2 'worth':7 'yes':3,4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ca/comment/6233495"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704923989 {#4745
    date: 2024-01-10 22:59:49.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
81 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
82 DENIED moderate
App\Entity\EntryComment {#4824
  +user: App\Entity\User {#4837 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
    \n
    Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
    \n
    The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
    \n
    Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 17
  +score: 0
  +lastActive: DateTime @1721525395 {#4819
    date: 2024-07-21 03:29:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4825 …}
  +nested: Doctrine\ORM\PersistentCollection {#4827 …}
  +votes: Doctrine\ORM\PersistentCollection {#4829 …}
  +reports: Doctrine\ORM\PersistentCollection {#4831 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4833 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4835 …}
  -id: 297117
  -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6313407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919503 {#4820
    date: 2024-01-10 21:45:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
83 DENIED edit
App\Entity\EntryComment {#4824
  +user: App\Entity\User {#4837 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
    \n
    Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
    \n
    The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
    \n
    Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 17
  +score: 0
  +lastActive: DateTime @1721525395 {#4819
    date: 2024-07-21 03:29:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4825 …}
  +nested: Doctrine\ORM\PersistentCollection {#4827 …}
  +votes: Doctrine\ORM\PersistentCollection {#4829 …}
  +reports: Doctrine\ORM\PersistentCollection {#4831 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4833 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4835 …}
  -id: 297117
  -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6313407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919503 {#4820
    date: 2024-01-10 21:45:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
84 DENIED moderate
App\Entity\EntryComment {#4824
  +user: App\Entity\User {#4837 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
    \n
    Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
    \n
    The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
    \n
    Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 17
  +score: 0
  +lastActive: DateTime @1721525395 {#4819
    date: 2024-07-21 03:29:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4825 …}
  +nested: Doctrine\ORM\PersistentCollection {#4827 …}
  +votes: Doctrine\ORM\PersistentCollection {#4829 …}
  +reports: Doctrine\ORM\PersistentCollection {#4831 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4833 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4835 …}
  -id: 297117
  -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6313407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919503 {#4820
    date: 2024-01-10 21:45:03.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
85 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
86 DENIED moderate
App\Entity\EntryComment {#5163
  +user: Proxies\__CG__\App\Entity\User {#5164 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4824
    +user: App\Entity\User {#4837 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
      \n
      Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
      \n
      The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
      \n
      Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 17
    +score: 0
    +lastActive: DateTime @1721525395 {#4819
      date: 2024-07-21 03:29:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4825 …}
    +nested: Doctrine\ORM\PersistentCollection {#4827 …}
    +votes: Doctrine\ORM\PersistentCollection {#4829 …}
    +reports: Doctrine\ORM\PersistentCollection {#4831 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4833 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4835 …}
    -id: 297117
    -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6313407"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919503 {#4820
      date: 2024-01-10 21:45:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4824}
  +body: "I ended up using Docker to set up pict-rs and y’all are making me happy I did"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705042613 {#5161
    date: 2024-01-12 07:56:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Hexarei@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5165 …}
  +nested: Doctrine\ORM\PersistentCollection {#5167 …}
  +votes: Doctrine\ORM\PersistentCollection {#5169 …}
  +reports: Doctrine\ORM\PersistentCollection {#5171 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5173 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5175 …}
  -id: 301260
  -bodyTs: "'docker':5 'end':2 'happi':18 'make':16 'pict':10 'pict-r':9 'rs':11 'set':7 'use':4 'y':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://cyberpaws.lol/comment/29"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705042613 {#5162
    date: 2024-01-12 07:56:53.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
87 DENIED edit
App\Entity\EntryComment {#5163
  +user: Proxies\__CG__\App\Entity\User {#5164 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4824
    +user: App\Entity\User {#4837 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
      \n
      Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
      \n
      The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
      \n
      Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 17
    +score: 0
    +lastActive: DateTime @1721525395 {#4819
      date: 2024-07-21 03:29:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4825 …}
    +nested: Doctrine\ORM\PersistentCollection {#4827 …}
    +votes: Doctrine\ORM\PersistentCollection {#4829 …}
    +reports: Doctrine\ORM\PersistentCollection {#4831 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4833 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4835 …}
    -id: 297117
    -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6313407"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919503 {#4820
      date: 2024-01-10 21:45:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4824}
  +body: "I ended up using Docker to set up pict-rs and y’all are making me happy I did"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705042613 {#5161
    date: 2024-01-12 07:56:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Hexarei@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5165 …}
  +nested: Doctrine\ORM\PersistentCollection {#5167 …}
  +votes: Doctrine\ORM\PersistentCollection {#5169 …}
  +reports: Doctrine\ORM\PersistentCollection {#5171 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5173 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5175 …}
  -id: 301260
  -bodyTs: "'docker':5 'end':2 'happi':18 'make':16 'pict':10 'pict-r':9 'rs':11 'set':7 'use':4 'y':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://cyberpaws.lol/comment/29"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705042613 {#5162
    date: 2024-01-12 07:56:53.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
88 DENIED moderate
App\Entity\EntryComment {#5163
  +user: Proxies\__CG__\App\Entity\User {#5164 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4824
    +user: App\Entity\User {#4837 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
      \n
      Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
      \n
      The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
      \n
      Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 17
    +score: 0
    +lastActive: DateTime @1721525395 {#4819
      date: 2024-07-21 03:29:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4825 …}
    +nested: Doctrine\ORM\PersistentCollection {#4827 …}
    +votes: Doctrine\ORM\PersistentCollection {#4829 …}
    +reports: Doctrine\ORM\PersistentCollection {#4831 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4833 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4835 …}
    -id: 297117
    -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6313407"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919503 {#4820
      date: 2024-01-10 21:45:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4824}
  +body: "I ended up using Docker to set up pict-rs and y’all are making me happy I did"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705042613 {#5161
    date: 2024-01-12 07:56:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Hexarei@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5165 …}
  +nested: Doctrine\ORM\PersistentCollection {#5167 …}
  +votes: Doctrine\ORM\PersistentCollection {#5169 …}
  +reports: Doctrine\ORM\PersistentCollection {#5171 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5173 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5175 …}
  -id: 301260
  -bodyTs: "'docker':5 'end':2 'happi':18 'make':16 'pict':10 'pict-r':9 'rs':11 'set':7 'use':4 'y':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://cyberpaws.lol/comment/29"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705042613 {#5162
    date: 2024-01-12 07:56:53.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
89 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
90 DENIED moderate
App\Entity\EntryComment {#4899
  +user: App\Entity\User {#4912 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    To answer each question:\n
    \n
    - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
    - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
    \n
    I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
    \n
    It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
    \n
    Why? I like to play.\n
    \n
    Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
    \n
    Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
    \n
    Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
    \n
    I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
    \n
    I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720429542 {#4894
    date: 2024-07-08 11:05:42.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4900 …}
  +nested: Doctrine\ORM\PersistentCollection {#4902 …}
  +votes: Doctrine\ORM\PersistentCollection {#4904 …}
  +reports: Doctrine\ORM\PersistentCollection {#4906 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
  -id: 297069
  -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851237"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919019 {#4895
    date: 2024-01-10 21:36:59.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
91 DENIED edit
App\Entity\EntryComment {#4899
  +user: App\Entity\User {#4912 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    To answer each question:\n
    \n
    - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
    - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
    \n
    I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
    \n
    It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
    \n
    Why? I like to play.\n
    \n
    Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
    \n
    Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
    \n
    Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
    \n
    I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
    \n
    I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720429542 {#4894
    date: 2024-07-08 11:05:42.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4900 …}
  +nested: Doctrine\ORM\PersistentCollection {#4902 …}
  +votes: Doctrine\ORM\PersistentCollection {#4904 …}
  +reports: Doctrine\ORM\PersistentCollection {#4906 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
  -id: 297069
  -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851237"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919019 {#4895
    date: 2024-01-10 21:36:59.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
92 DENIED moderate
App\Entity\EntryComment {#4899
  +user: App\Entity\User {#4912 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    To answer each question:\n
    \n
    - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
    - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
    \n
    I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
    \n
    It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
    \n
    Why? I like to play.\n
    \n
    Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
    \n
    Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
    \n
    Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
    \n
    I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
    \n
    I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720429542 {#4894
    date: 2024-07-08 11:05:42.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4900 …}
  +nested: Doctrine\ORM\PersistentCollection {#4902 …}
  +votes: Doctrine\ORM\PersistentCollection {#4904 …}
  +reports: Doctrine\ORM\PersistentCollection {#4906 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
  -id: 297069
  -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851237"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919019 {#4895
    date: 2024-01-10 21:36:59.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
93 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
94 DENIED moderate
App\Entity\EntryComment {#5147
  +user: Proxies\__CG__\App\Entity\User {#5148 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4899
    +user: App\Entity\User {#4912 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      To answer each question:\n
      \n
      - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
      - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
      \n
      I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
      \n
      It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
      \n
      Why? I like to play.\n
      \n
      Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
      \n
      Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
      \n
      Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
      \n
      I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
      \n
      I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720429542 {#4894
      date: 2024-07-08 11:05:42.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4900 …}
    +nested: Doctrine\ORM\PersistentCollection {#4902 …}
    +votes: Doctrine\ORM\PersistentCollection {#4904 …}
    +reports: Doctrine\ORM\PersistentCollection {#4906 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
    -id: 297069
    -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://reddrefuge.com/comment/851237"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919019 {#4895
      date: 2024-01-10 21:36:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4899}
  +body: """
    > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    \n
    There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704928558 {#5144
    date: 2024-01-11 00:15:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5149 …}
  +nested: Doctrine\ORM\PersistentCollection {#5151 …}
  +votes: Doctrine\ORM\PersistentCollection {#5153 …}
  +reports: Doctrine\ORM\PersistentCollection {#5155 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5157 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5159 …}
  -id: 297651
  -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923527"
  +editedAt: DateTimeImmutable @1720418191 {#5145
    date: 2024-07-08 07:56:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704928558 {#5146
    date: 2024-01-11 00:15:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
95 DENIED edit
App\Entity\EntryComment {#5147
  +user: Proxies\__CG__\App\Entity\User {#5148 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4899
    +user: App\Entity\User {#4912 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      To answer each question:\n
      \n
      - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
      - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
      \n
      I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
      \n
      It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
      \n
      Why? I like to play.\n
      \n
      Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
      \n
      Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
      \n
      Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
      \n
      I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
      \n
      I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720429542 {#4894
      date: 2024-07-08 11:05:42.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4900 …}
    +nested: Doctrine\ORM\PersistentCollection {#4902 …}
    +votes: Doctrine\ORM\PersistentCollection {#4904 …}
    +reports: Doctrine\ORM\PersistentCollection {#4906 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
    -id: 297069
    -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://reddrefuge.com/comment/851237"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919019 {#4895
      date: 2024-01-10 21:36:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4899}
  +body: """
    > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    \n
    There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704928558 {#5144
    date: 2024-01-11 00:15:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5149 …}
  +nested: Doctrine\ORM\PersistentCollection {#5151 …}
  +votes: Doctrine\ORM\PersistentCollection {#5153 …}
  +reports: Doctrine\ORM\PersistentCollection {#5155 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5157 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5159 …}
  -id: 297651
  -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923527"
  +editedAt: DateTimeImmutable @1720418191 {#5145
    date: 2024-07-08 07:56:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704928558 {#5146
    date: 2024-01-11 00:15:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
96 DENIED moderate
App\Entity\EntryComment {#5147
  +user: Proxies\__CG__\App\Entity\User {#5148 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4899
    +user: App\Entity\User {#4912 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      To answer each question:\n
      \n
      - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
      - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
      \n
      I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
      \n
      It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
      \n
      Why? I like to play.\n
      \n
      Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
      \n
      Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
      \n
      Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
      \n
      I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
      \n
      I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720429542 {#4894
      date: 2024-07-08 11:05:42.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4900 …}
    +nested: Doctrine\ORM\PersistentCollection {#4902 …}
    +votes: Doctrine\ORM\PersistentCollection {#4904 …}
    +reports: Doctrine\ORM\PersistentCollection {#4906 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
    -id: 297069
    -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://reddrefuge.com/comment/851237"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919019 {#4895
      date: 2024-01-10 21:36:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4899}
  +body: """
    > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    \n
    There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704928558 {#5144
    date: 2024-01-11 00:15:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5149 …}
  +nested: Doctrine\ORM\PersistentCollection {#5151 …}
  +votes: Doctrine\ORM\PersistentCollection {#5153 …}
  +reports: Doctrine\ORM\PersistentCollection {#5155 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5157 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5159 …}
  -id: 297651
  -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923527"
  +editedAt: DateTimeImmutable @1720418191 {#5145
    date: 2024-07-08 07:56:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704928558 {#5146
    date: 2024-01-11 00:15:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
97 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
98 DENIED moderate
App\Entity\EntryComment {#5260
  +user: App\Entity\User {#4912 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5147
    +user: Proxies\__CG__\App\Entity\User {#5148 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4899
      +user: App\Entity\User {#4912 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        To answer each question:\n
        \n
        - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
        - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
        - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
        \n
        I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
        \n
        It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
        \n
        Why? I like to play.\n
        \n
        Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
        \n
        Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
        \n
        Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
        \n
        I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
        \n
        I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720429542 {#4894
        date: 2024-07-08 11:05:42.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4900 …}
      +nested: Doctrine\ORM\PersistentCollection {#4902 …}
      +votes: Doctrine\ORM\PersistentCollection {#4904 …}
      +reports: Doctrine\ORM\PersistentCollection {#4906 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
      -id: 297069
      -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://reddrefuge.com/comment/851237"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704919019 {#4895
        date: 2024-01-10 21:36:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4899}
    +body: """
      > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      \n
      There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704928558 {#5144
      date: 2024-01-11 00:15:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5149 …}
    +nested: Doctrine\ORM\PersistentCollection {#5151 …}
    +votes: Doctrine\ORM\PersistentCollection {#5153 …}
    +reports: Doctrine\ORM\PersistentCollection {#5155 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5157 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5159 …}
    -id: 297651
    -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/5923527"
    +editedAt: DateTimeImmutable @1720418191 {#5145
      date: 2024-07-08 07:56:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704928558 {#5146
      date: 2024-01-11 00:15:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4899}
  +body: "Yep, all true. I was oversimplifying in my explanation, but you’re right. There’s a lot more to it than what I wrote - I was more relating docker to what we used to do with chroot jails."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704929831 {#5259
    date: 2024-01-11 00:37:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5265 …}
  +nested: Doctrine\ORM\PersistentCollection {#5266 …}
  +votes: Doctrine\ORM\PersistentCollection {#5268 …}
  +reports: Doctrine\ORM\PersistentCollection {#5272 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5274 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5276 …}
  -id: 297707
  -bodyTs: "'chroot':37 'docker':29 'explan':9 'jail':38 'lot':17 'oversimplifi':6 're':12 'relat':28 'right':13 'true':3 'use':33 'wrote':24 'yep':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851584"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704929831 {#5262
    date: 2024-01-11 00:37:11.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
99 DENIED edit
App\Entity\EntryComment {#5260
  +user: App\Entity\User {#4912 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5147
    +user: Proxies\__CG__\App\Entity\User {#5148 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4899
      +user: App\Entity\User {#4912 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        To answer each question:\n
        \n
        - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
        - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
        - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
        \n
        I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
        \n
        It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
        \n
        Why? I like to play.\n
        \n
        Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
        \n
        Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
        \n
        Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
        \n
        I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
        \n
        I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720429542 {#4894
        date: 2024-07-08 11:05:42.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4900 …}
      +nested: Doctrine\ORM\PersistentCollection {#4902 …}
      +votes: Doctrine\ORM\PersistentCollection {#4904 …}
      +reports: Doctrine\ORM\PersistentCollection {#4906 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
      -id: 297069
      -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://reddrefuge.com/comment/851237"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704919019 {#4895
        date: 2024-01-10 21:36:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4899}
    +body: """
      > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      \n
      There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704928558 {#5144
      date: 2024-01-11 00:15:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5149 …}
    +nested: Doctrine\ORM\PersistentCollection {#5151 …}
    +votes: Doctrine\ORM\PersistentCollection {#5153 …}
    +reports: Doctrine\ORM\PersistentCollection {#5155 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5157 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5159 …}
    -id: 297651
    -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/5923527"
    +editedAt: DateTimeImmutable @1720418191 {#5145
      date: 2024-07-08 07:56:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704928558 {#5146
      date: 2024-01-11 00:15:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4899}
  +body: "Yep, all true. I was oversimplifying in my explanation, but you’re right. There’s a lot more to it than what I wrote - I was more relating docker to what we used to do with chroot jails."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704929831 {#5259
    date: 2024-01-11 00:37:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5265 …}
  +nested: Doctrine\ORM\PersistentCollection {#5266 …}
  +votes: Doctrine\ORM\PersistentCollection {#5268 …}
  +reports: Doctrine\ORM\PersistentCollection {#5272 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5274 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5276 …}
  -id: 297707
  -bodyTs: "'chroot':37 'docker':29 'explan':9 'jail':38 'lot':17 'oversimplifi':6 're':12 'relat':28 'right':13 'true':3 'use':33 'wrote':24 'yep':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851584"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704929831 {#5262
    date: 2024-01-11 00:37:11.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
100 DENIED moderate
App\Entity\EntryComment {#5260
  +user: App\Entity\User {#4912 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5147
    +user: Proxies\__CG__\App\Entity\User {#5148 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4899
      +user: App\Entity\User {#4912 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        To answer each question:\n
        \n
        - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
        - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
        - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
        \n
        I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
        \n
        It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
        \n
        Why? I like to play.\n
        \n
        Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
        \n
        Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
        \n
        Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
        \n
        I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
        \n
        I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720429542 {#4894
        date: 2024-07-08 11:05:42.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4900 …}
      +nested: Doctrine\ORM\PersistentCollection {#4902 …}
      +votes: Doctrine\ORM\PersistentCollection {#4904 …}
      +reports: Doctrine\ORM\PersistentCollection {#4906 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4908 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4910 …}
      -id: 297069
      -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://reddrefuge.com/comment/851237"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704919019 {#4895
        date: 2024-01-10 21:36:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4899}
    +body: """
      > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      \n
      There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704928558 {#5144
      date: 2024-01-11 00:15:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5149 …}
    +nested: Doctrine\ORM\PersistentCollection {#5151 …}
    +votes: Doctrine\ORM\PersistentCollection {#5153 …}
    +reports: Doctrine\ORM\PersistentCollection {#5155 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5157 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5159 …}
    -id: 297651
    -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/5923527"
    +editedAt: DateTimeImmutable @1720418191 {#5145
      date: 2024-07-08 07:56:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704928558 {#5146
      date: 2024-01-11 00:15:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4899}
  +body: "Yep, all true. I was oversimplifying in my explanation, but you’re right. There’s a lot more to it than what I wrote - I was more relating docker to what we used to do with chroot jails."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704929831 {#5259
    date: 2024-01-11 00:37:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5265 …}
  +nested: Doctrine\ORM\PersistentCollection {#5266 …}
  +votes: Doctrine\ORM\PersistentCollection {#5268 …}
  +reports: Doctrine\ORM\PersistentCollection {#5272 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5274 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5276 …}
  -id: 297707
  -bodyTs: "'chroot':37 'docker':29 'explan':9 'jail':38 'lot':17 'oversimplifi':6 're':12 'relat':28 'right':13 'true':3 'use':33 'wrote':24 'yep':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851584"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704929831 {#5262
    date: 2024-01-11 00:37:11.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
101 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
102 DENIED moderate
App\Entity\EntryComment {#4974
  +user: App\Entity\User {#4987 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    My personal opinion is that Docker just makes things more difficult. *Containers* are fantastic, and I use plenty of them, but Docker is just one way to implement containers, and a bad one. I have a server that runs Proxmox; if I need to set up a new service, I just spin up a LXC and install what I need to. It gives all the advantages of a full Linux installation without taking up the resources of a full-fledged OS. With Docker, I would need a VM running the docker host, then I’d have to install my docker containers inside this host, then forward any ports or resources between the hypervisor, docker host, and docker container.\n
    \n
    I just don’t get the use-case for Docker. As far as I can tell, all it does is add another layer of complexity between the host machine and the container.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1720303805 {#4969
    date: 2024-07-07 00:10:05.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4975 …}
  +nested: Doctrine\ORM\PersistentCollection {#4977 …}
  +votes: Doctrine\ORM\PersistentCollection {#4979 …}
  +reports: Doctrine\ORM\PersistentCollection {#4981 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4983 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4985 …}
  -id: 297040
  -bodyTs: "'add':141 'advantag':66 'anoth':142 'bad':32 'case':128 'complex':145 'contain':12,29,102,119,152 'd':96 'difficult':11 'docker':6,22,84,92,101,115,118,130 'fantast':14 'far':132 'fledg':81 'forward':107 'full':69,80 'full-fledg':79 'get':124 'give':63 'host':93,105,116,148 'hypervisor':114 'implement':28 'insid':103 'instal':57,71,99 'layer':143 'linux':70 'lxc':55 'machin':149 'make':8 'need':43,60,87 'new':48 'one':25,33 'opinion':3 'os':82 'person':2 'plenti':18 'port':109 'proxmox':40 'resourc':76,111 'run':39,90 'server':37 'servic':49 'set':45 'spin':52 'take':73 'tell':136 'thing':9 'use':17,127 'use-cas':126 'vm':89 'way':26 'without':72 'would':86"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6561227"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704918634 {#4970
    date: 2024-01-10 21:30:34.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
103 DENIED edit
App\Entity\EntryComment {#4974
  +user: App\Entity\User {#4987 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    My personal opinion is that Docker just makes things more difficult. *Containers* are fantastic, and I use plenty of them, but Docker is just one way to implement containers, and a bad one. I have a server that runs Proxmox; if I need to set up a new service, I just spin up a LXC and install what I need to. It gives all the advantages of a full Linux installation without taking up the resources of a full-fledged OS. With Docker, I would need a VM running the docker host, then I’d have to install my docker containers inside this host, then forward any ports or resources between the hypervisor, docker host, and docker container.\n
    \n
    I just don’t get the use-case for Docker. As far as I can tell, all it does is add another layer of complexity between the host machine and the container.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1720303805 {#4969
    date: 2024-07-07 00:10:05.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4975 …}
  +nested: Doctrine\ORM\PersistentCollection {#4977 …}
  +votes: Doctrine\ORM\PersistentCollection {#4979 …}
  +reports: Doctrine\ORM\PersistentCollection {#4981 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4983 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4985 …}
  -id: 297040
  -bodyTs: "'add':141 'advantag':66 'anoth':142 'bad':32 'case':128 'complex':145 'contain':12,29,102,119,152 'd':96 'difficult':11 'docker':6,22,84,92,101,115,118,130 'fantast':14 'far':132 'fledg':81 'forward':107 'full':69,80 'full-fledg':79 'get':124 'give':63 'host':93,105,116,148 'hypervisor':114 'implement':28 'insid':103 'instal':57,71,99 'layer':143 'linux':70 'lxc':55 'machin':149 'make':8 'need':43,60,87 'new':48 'one':25,33 'opinion':3 'os':82 'person':2 'plenti':18 'port':109 'proxmox':40 'resourc':76,111 'run':39,90 'server':37 'servic':49 'set':45 'spin':52 'take':73 'tell':136 'thing':9 'use':17,127 'use-cas':126 'vm':89 'way':26 'without':72 'would':86"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6561227"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704918634 {#4970
    date: 2024-01-10 21:30:34.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
104 DENIED moderate
App\Entity\EntryComment {#4974
  +user: App\Entity\User {#4987 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    My personal opinion is that Docker just makes things more difficult. *Containers* are fantastic, and I use plenty of them, but Docker is just one way to implement containers, and a bad one. I have a server that runs Proxmox; if I need to set up a new service, I just spin up a LXC and install what I need to. It gives all the advantages of a full Linux installation without taking up the resources of a full-fledged OS. With Docker, I would need a VM running the docker host, then I’d have to install my docker containers inside this host, then forward any ports or resources between the hypervisor, docker host, and docker container.\n
    \n
    I just don’t get the use-case for Docker. As far as I can tell, all it does is add another layer of complexity between the host machine and the container.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1720303805 {#4969
    date: 2024-07-07 00:10:05.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4975 …}
  +nested: Doctrine\ORM\PersistentCollection {#4977 …}
  +votes: Doctrine\ORM\PersistentCollection {#4979 …}
  +reports: Doctrine\ORM\PersistentCollection {#4981 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4983 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4985 …}
  -id: 297040
  -bodyTs: "'add':141 'advantag':66 'anoth':142 'bad':32 'case':128 'complex':145 'contain':12,29,102,119,152 'd':96 'difficult':11 'docker':6,22,84,92,101,115,118,130 'fantast':14 'far':132 'fledg':81 'forward':107 'full':69,80 'full-fledg':79 'get':124 'give':63 'host':93,105,116,148 'hypervisor':114 'implement':28 'insid':103 'instal':57,71,99 'layer':143 'linux':70 'lxc':55 'machin':149 'make':8 'need':43,60,87 'new':48 'one':25,33 'opinion':3 'os':82 'person':2 'plenti':18 'port':109 'proxmox':40 'resourc':76,111 'run':39,90 'server':37 'servic':49 'set':45 'spin':52 'take':73 'tell':136 'thing':9 'use':17,127 'use-cas':126 'vm':89 'way':26 'without':72 'would':86"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6561227"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704918634 {#4970
    date: 2024-01-10 21:30:34.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
105 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
106 DENIED moderate
App\Entity\EntryComment {#5131
  +user: Proxies\__CG__\App\Entity\User {#5128 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4974
    +user: App\Entity\User {#4987 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      My personal opinion is that Docker just makes things more difficult. *Containers* are fantastic, and I use plenty of them, but Docker is just one way to implement containers, and a bad one. I have a server that runs Proxmox; if I need to set up a new service, I just spin up a LXC and install what I need to. It gives all the advantages of a full Linux installation without taking up the resources of a full-fledged OS. With Docker, I would need a VM running the docker host, then I’d have to install my docker containers inside this host, then forward any ports or resources between the hypervisor, docker host, and docker container.\n
      \n
      I just don’t get the use-case for Docker. As far as I can tell, all it does is add another layer of complexity between the host machine and the container.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1720303805 {#4969
      date: 2024-07-07 00:10:05.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4975 …}
    +nested: Doctrine\ORM\PersistentCollection {#4977 …}
    +votes: Doctrine\ORM\PersistentCollection {#4979 …}
    +reports: Doctrine\ORM\PersistentCollection {#4981 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4983 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4985 …}
    -id: 297040
    -bodyTs: "'add':141 'advantag':66 'anoth':142 'bad':32 'case':128 'complex':145 'contain':12,29,102,119,152 'd':96 'difficult':11 'docker':6,22,84,92,101,115,118,130 'fantast':14 'far':132 'fledg':81 'forward':107 'full':69,80 'full-fledg':79 'get':124 'give':63 'host':93,105,116,148 'hypervisor':114 'implement':28 'insid':103 'instal':57,71,99 'layer':143 'linux':70 'lxc':55 'machin':149 'make':8 'need':43,60,87 'new':48 'one':25,33 'opinion':3 'os':82 'person':2 'plenti':18 'port':109 'proxmox':40 'resourc':76,111 'run':39,90 'server':37 'servic':49 'set':45 'spin':52 'take':73 'tell':136 'thing':9 'use':17,127 'use-cas':126 'vm':89 'way':26 'without':72 'would':86"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6561227"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704918634 {#4970
      date: 2024-01-10 21:30:34.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4974}
  +body: """
    Though this is more of a proxmox ease of use issue than docker, personally I swapped from it to pure debian server/host to run a similar manual setup with podman - so everything runs right on the host.\n
    \n
    In theory I think you can achieve this with proxmox ssh’ing into the host and just treating it like a usual debian
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704919596 {#5132
    date: 2024-01-10 21:46:36.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@corroded@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5125 …}
  +nested: Doctrine\ORM\PersistentCollection {#5123 …}
  +votes: Doctrine\ORM\PersistentCollection {#5127 …}
  +reports: Doctrine\ORM\PersistentCollection {#5138 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5140 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5142 …}
  -id: 297120
  -bodyTs: "'achiev':44 'debian':21,60 'docker':13 'eas':8 'everyth':32 'host':37,52 'ing':49 'issu':11 'like':57 'manual':27 'person':14 'podman':30 'proxmox':7,47 'pure':20 'right':34 'run':24,33 'server/host':22 'setup':28 'similar':26 'ssh':48 'swap':16 'theori':39 'think':41 'though':1 'treat':55 'use':10 'usual':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7357854"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919596 {#5135
    date: 2024-01-10 21:46:36.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
107 DENIED edit
App\Entity\EntryComment {#5131
  +user: Proxies\__CG__\App\Entity\User {#5128 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4974
    +user: App\Entity\User {#4987 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      My personal opinion is that Docker just makes things more difficult. *Containers* are fantastic, and I use plenty of them, but Docker is just one way to implement containers, and a bad one. I have a server that runs Proxmox; if I need to set up a new service, I just spin up a LXC and install what I need to. It gives all the advantages of a full Linux installation without taking up the resources of a full-fledged OS. With Docker, I would need a VM running the docker host, then I’d have to install my docker containers inside this host, then forward any ports or resources between the hypervisor, docker host, and docker container.\n
      \n
      I just don’t get the use-case for Docker. As far as I can tell, all it does is add another layer of complexity between the host machine and the container.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1720303805 {#4969
      date: 2024-07-07 00:10:05.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4975 …}
    +nested: Doctrine\ORM\PersistentCollection {#4977 …}
    +votes: Doctrine\ORM\PersistentCollection {#4979 …}
    +reports: Doctrine\ORM\PersistentCollection {#4981 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4983 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4985 …}
    -id: 297040
    -bodyTs: "'add':141 'advantag':66 'anoth':142 'bad':32 'case':128 'complex':145 'contain':12,29,102,119,152 'd':96 'difficult':11 'docker':6,22,84,92,101,115,118,130 'fantast':14 'far':132 'fledg':81 'forward':107 'full':69,80 'full-fledg':79 'get':124 'give':63 'host':93,105,116,148 'hypervisor':114 'implement':28 'insid':103 'instal':57,71,99 'layer':143 'linux':70 'lxc':55 'machin':149 'make':8 'need':43,60,87 'new':48 'one':25,33 'opinion':3 'os':82 'person':2 'plenti':18 'port':109 'proxmox':40 'resourc':76,111 'run':39,90 'server':37 'servic':49 'set':45 'spin':52 'take':73 'tell':136 'thing':9 'use':17,127 'use-cas':126 'vm':89 'way':26 'without':72 'would':86"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6561227"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704918634 {#4970
      date: 2024-01-10 21:30:34.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4974}
  +body: """
    Though this is more of a proxmox ease of use issue than docker, personally I swapped from it to pure debian server/host to run a similar manual setup with podman - so everything runs right on the host.\n
    \n
    In theory I think you can achieve this with proxmox ssh’ing into the host and just treating it like a usual debian
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704919596 {#5132
    date: 2024-01-10 21:46:36.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@corroded@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5125 …}
  +nested: Doctrine\ORM\PersistentCollection {#5123 …}
  +votes: Doctrine\ORM\PersistentCollection {#5127 …}
  +reports: Doctrine\ORM\PersistentCollection {#5138 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5140 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5142 …}
  -id: 297120
  -bodyTs: "'achiev':44 'debian':21,60 'docker':13 'eas':8 'everyth':32 'host':37,52 'ing':49 'issu':11 'like':57 'manual':27 'person':14 'podman':30 'proxmox':7,47 'pure':20 'right':34 'run':24,33 'server/host':22 'setup':28 'similar':26 'ssh':48 'swap':16 'theori':39 'think':41 'though':1 'treat':55 'use':10 'usual':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7357854"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919596 {#5135
    date: 2024-01-10 21:46:36.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
108 DENIED moderate
App\Entity\EntryComment {#5131
  +user: Proxies\__CG__\App\Entity\User {#5128 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4974
    +user: App\Entity\User {#4987 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      My personal opinion is that Docker just makes things more difficult. *Containers* are fantastic, and I use plenty of them, but Docker is just one way to implement containers, and a bad one. I have a server that runs Proxmox; if I need to set up a new service, I just spin up a LXC and install what I need to. It gives all the advantages of a full Linux installation without taking up the resources of a full-fledged OS. With Docker, I would need a VM running the docker host, then I’d have to install my docker containers inside this host, then forward any ports or resources between the hypervisor, docker host, and docker container.\n
      \n
      I just don’t get the use-case for Docker. As far as I can tell, all it does is add another layer of complexity between the host machine and the container.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1720303805 {#4969
      date: 2024-07-07 00:10:05.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4975 …}
    +nested: Doctrine\ORM\PersistentCollection {#4977 …}
    +votes: Doctrine\ORM\PersistentCollection {#4979 …}
    +reports: Doctrine\ORM\PersistentCollection {#4981 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4983 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4985 …}
    -id: 297040
    -bodyTs: "'add':141 'advantag':66 'anoth':142 'bad':32 'case':128 'complex':145 'contain':12,29,102,119,152 'd':96 'difficult':11 'docker':6,22,84,92,101,115,118,130 'fantast':14 'far':132 'fledg':81 'forward':107 'full':69,80 'full-fledg':79 'get':124 'give':63 'host':93,105,116,148 'hypervisor':114 'implement':28 'insid':103 'instal':57,71,99 'layer':143 'linux':70 'lxc':55 'machin':149 'make':8 'need':43,60,87 'new':48 'one':25,33 'opinion':3 'os':82 'person':2 'plenti':18 'port':109 'proxmox':40 'resourc':76,111 'run':39,90 'server':37 'servic':49 'set':45 'spin':52 'take':73 'tell':136 'thing':9 'use':17,127 'use-cas':126 'vm':89 'way':26 'without':72 'would':86"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6561227"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704918634 {#4970
      date: 2024-01-10 21:30:34.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4974}
  +body: """
    Though this is more of a proxmox ease of use issue than docker, personally I swapped from it to pure debian server/host to run a similar manual setup with podman - so everything runs right on the host.\n
    \n
    In theory I think you can achieve this with proxmox ssh’ing into the host and just treating it like a usual debian
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704919596 {#5132
    date: 2024-01-10 21:46:36.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@corroded@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5125 …}
  +nested: Doctrine\ORM\PersistentCollection {#5123 …}
  +votes: Doctrine\ORM\PersistentCollection {#5127 …}
  +reports: Doctrine\ORM\PersistentCollection {#5138 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5140 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5142 …}
  -id: 297120
  -bodyTs: "'achiev':44 'debian':21,60 'docker':13 'eas':8 'everyth':32 'host':37,52 'ing':49 'issu':11 'like':57 'manual':27 'person':14 'podman':30 'proxmox':7,47 'pure':20 'right':34 'run':24,33 'server/host':22 'setup':28 'similar':26 'ssh':48 'swap':16 'theori':39 'think':41 'though':1 'treat':55 'use':10 'usual':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7357854"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919596 {#5135
    date: 2024-01-10 21:46:36.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
109 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
110 DENIED moderate
App\Entity\EntryComment {#5047
  +user: App\Entity\User {#5060 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I know enough to be dangerous. I know enough to follow faqs but dumb enough to not backup like I should.\n
    \n
    So I’d be running my server on bare metal and have a couple services going and sooner or later, shit would get borked. Shit that was miles past my competence to fix. Sometimes I’d set up a DB wrong, or break it, or an update would screw it up, and then it would all fall apart and I’m there cursing and wiping and starting all over.\n
    \n
    Docker fixes that completely. It’s not perfect, but it has drastically lowered my time working on my server.\n
    \n
    My server used to be a hobby that I loved dumping hours into. Now, I just want shit to work.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704915778 {#5042
    date: 2024-01-10 20:42:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5048 …}
  +nested: Doctrine\ORM\PersistentCollection {#5050 …}
  +votes: Doctrine\ORM\PersistentCollection {#5052 …}
  +reports: Doctrine\ORM\PersistentCollection {#5054 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5056 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5058 …}
  -id: 296859
  -bodyTs: "'apart':79 'backup':18 'bare':30 'bork':45 'break':64 'compet':52 'complet':94 'coupl':35 'curs':84 'd':24,57 'danger':6 'db':61 'docker':91 'drastic':102 'dumb':14 'dump':120 'enough':3,9,15 'fall':78 'faq':12 'fix':54,92 'follow':11 'get':44 'go':37 'hobbi':116 'hour':121 'know':2,8 'later':41 'like':19 'love':119 'lower':103 'm':82 'metal':31 'mile':49 'past':50 'perfect':98 'run':26 'screw':70 'server':28,109,111 'servic':36 'set':58 'shit':42,46,127 'sometim':55 'sooner':39 'start':88 'time':105 'updat':68 'use':112 'want':126 'wipe':86 'work':106,129 'would':43,69,76 'wrong':62"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6560185"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704915778 {#5043
    date: 2024-01-10 20:42:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
111 DENIED edit
App\Entity\EntryComment {#5047
  +user: App\Entity\User {#5060 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I know enough to be dangerous. I know enough to follow faqs but dumb enough to not backup like I should.\n
    \n
    So I’d be running my server on bare metal and have a couple services going and sooner or later, shit would get borked. Shit that was miles past my competence to fix. Sometimes I’d set up a DB wrong, or break it, or an update would screw it up, and then it would all fall apart and I’m there cursing and wiping and starting all over.\n
    \n
    Docker fixes that completely. It’s not perfect, but it has drastically lowered my time working on my server.\n
    \n
    My server used to be a hobby that I loved dumping hours into. Now, I just want shit to work.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704915778 {#5042
    date: 2024-01-10 20:42:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5048 …}
  +nested: Doctrine\ORM\PersistentCollection {#5050 …}
  +votes: Doctrine\ORM\PersistentCollection {#5052 …}
  +reports: Doctrine\ORM\PersistentCollection {#5054 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5056 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5058 …}
  -id: 296859
  -bodyTs: "'apart':79 'backup':18 'bare':30 'bork':45 'break':64 'compet':52 'complet':94 'coupl':35 'curs':84 'd':24,57 'danger':6 'db':61 'docker':91 'drastic':102 'dumb':14 'dump':120 'enough':3,9,15 'fall':78 'faq':12 'fix':54,92 'follow':11 'get':44 'go':37 'hobbi':116 'hour':121 'know':2,8 'later':41 'like':19 'love':119 'lower':103 'm':82 'metal':31 'mile':49 'past':50 'perfect':98 'run':26 'screw':70 'server':28,109,111 'servic':36 'set':58 'shit':42,46,127 'sometim':55 'sooner':39 'start':88 'time':105 'updat':68 'use':112 'want':126 'wipe':86 'work':106,129 'would':43,69,76 'wrong':62"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6560185"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704915778 {#5043
    date: 2024-01-10 20:42:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
112 DENIED moderate
App\Entity\EntryComment {#5047
  +user: App\Entity\User {#5060 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I know enough to be dangerous. I know enough to follow faqs but dumb enough to not backup like I should.\n
    \n
    So I’d be running my server on bare metal and have a couple services going and sooner or later, shit would get borked. Shit that was miles past my competence to fix. Sometimes I’d set up a DB wrong, or break it, or an update would screw it up, and then it would all fall apart and I’m there cursing and wiping and starting all over.\n
    \n
    Docker fixes that completely. It’s not perfect, but it has drastically lowered my time working on my server.\n
    \n
    My server used to be a hobby that I loved dumping hours into. Now, I just want shit to work.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704915778 {#5042
    date: 2024-01-10 20:42:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5048 …}
  +nested: Doctrine\ORM\PersistentCollection {#5050 …}
  +votes: Doctrine\ORM\PersistentCollection {#5052 …}
  +reports: Doctrine\ORM\PersistentCollection {#5054 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5056 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5058 …}
  -id: 296859
  -bodyTs: "'apart':79 'backup':18 'bare':30 'bork':45 'break':64 'compet':52 'complet':94 'coupl':35 'curs':84 'd':24,57 'danger':6 'db':61 'docker':91 'drastic':102 'dumb':14 'dump':120 'enough':3,9,15 'fall':78 'faq':12 'fix':54,92 'follow':11 'get':44 'go':37 'hobbi':116 'hour':121 'know':2,8 'later':41 'like':19 'love':119 'lower':103 'm':82 'metal':31 'mile':49 'past':50 'perfect':98 'run':26 'screw':70 'server':28,109,111 'servic':36 'set':58 'shit':42,46,127 'sometim':55 'sooner':39 'start':88 'time':105 'updat':68 'use':112 'want':126 'wipe':86 'work':106,129 'would':43,69,76 'wrong':62"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6560185"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704915778 {#5043
    date: 2024-01-10 20:42:58.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
113 DENIED edit
App\Entity\Magazine {#264
  +icon: Proxies\__CG__\App\Entity\Image {#245 …}
  +name: "selfhosted@lemmy.world"
  +title: "selfhosted"
  +description: """
    A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
    \n
    Rules:\n
    \n
    - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
    - No spam posting.\n
    - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
    - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
    - No trolling.\n
    \n
    Resources:\n
    \n
    - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
    - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
    - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
    \n
    > Any issues on the community? Report it using the report flag.\n
    \n
    > Questions? DM the mods!
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 222
  +entryCommentCount: 3916
  +postCount: 0
  +postCommentCount: 0
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729582735 {#274
    date: 2024-10-22 09:38:55.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#236 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
  +entries: Doctrine\ORM\PersistentCollection {#179 …}
  +posts: Doctrine\ORM\PersistentCollection {#137 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
  +bans: Doctrine\ORM\PersistentCollection {#116 …}
  +reports: Doctrine\ORM\PersistentCollection {#102 …}
  +badges: Doctrine\ORM\PersistentCollection {#80 …}
  +logs: Doctrine\ORM\PersistentCollection {#70 …}
  +awards: Doctrine\ORM\PersistentCollection {#1360 …}
  +categories: Doctrine\ORM\PersistentCollection {#1792 …}
  -id: 120
  +apId: "selfhosted@lemmy.world"
  +apProfileId: "https://lemmy.world/c/selfhosted"
  +apPublicUrl: "https://lemmy.world/c/selfhosted"
  +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
  +apInboxUrl: "https://lemmy.world/inbox"
  +apDomain: "lemmy.world"
  +apPreferredUsername: "selfhosted"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1703473826 {#268
    date: 2023-12-25 04:10:26.0 +01:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1703473826 {#270
    date: 2023-12-25 04:10:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS DENIED
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details