GET https://kbin.spritesserver.nl/index.php/m/selfhosted@lemmy.world/t/28686/Why-docker/top?p=1

Response
200 OK
IP
216.73.216.97
Profiled on
Token
b660e6

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 10.19 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.06 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#274
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#268
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#270
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Why-docker"
  +title: "Why docker"
  +url: null
  +body: """
    Hi! Question in the title.\n
    \n
    I get that its super easy to setup. But its really worthwhile to have something that:\n
    \n
    - runs everything as root (not many well built images with proper useranagement it seems)\n
    - you cannot really know which stuff is in the images: you must trust who built it\n
    - lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
    \n
    I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 50
  +favouriteCount: 89
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722359949 {#2418
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 28686
  -titleTs: "'docker':2"
  -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704992786
  +visibility: "visible             "
  +apId: "https://feddit.it/post/4722445"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906386 {#1858
    date: 2024-01-10 18:06:26.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#274
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#268
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#270
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Why-docker"
  +title: "Why docker"
  +url: null
  +body: """
    Hi! Question in the title.\n
    \n
    I get that its super easy to setup. But its really worthwhile to have something that:\n
    \n
    - runs everything as root (not many well built images with proper useranagement it seems)\n
    - you cannot really know which stuff is in the images: you must trust who built it\n
    - lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
    \n
    I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 50
  +favouriteCount: 89
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722359949 {#2418
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 28686
  -titleTs: "'docker':2"
  -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704992786
  +visibility: "visible             "
  +apId: "https://feddit.it/post/4722445"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906386 {#1858
    date: 2024-01-10 18:06:26.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#274
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#268
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#270
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Why-docker"
  +title: "Why docker"
  +url: null
  +body: """
    Hi! Question in the title.\n
    \n
    I get that its super easy to setup. But its really worthwhile to have something that:\n
    \n
    - runs everything as root (not many well built images with proper useranagement it seems)\n
    - you cannot really know which stuff is in the images: you must trust who built it\n
    - lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
    \n
    I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 50
  +favouriteCount: 89
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1722359949 {#2418
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 28686
  -titleTs: "'docker':2"
  -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704992786
  +visibility: "visible             "
  +apId: "https://feddit.it/post/4722445"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906386 {#1858
    date: 2024-01-10 18:06:26.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#4042
  +user: App\Entity\User {#3991 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Life is too short to install everything on baremetal."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721731699 {#4051
    date: 2024-07-23 12:48:19.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4040 …}
  +nested: Doctrine\ORM\PersistentCollection {#4038 …}
  +votes: Doctrine\ORM\PersistentCollection {#4036 …}
  +reports: Doctrine\ORM\PersistentCollection {#4034 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
  -id: 298599
  -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6574648"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964972 {#3983
    date: 2024-01-11 10:22:52.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#4042
  +user: App\Entity\User {#3991 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Life is too short to install everything on baremetal."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721731699 {#4051
    date: 2024-07-23 12:48:19.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4040 …}
  +nested: Doctrine\ORM\PersistentCollection {#4038 …}
  +votes: Doctrine\ORM\PersistentCollection {#4036 …}
  +reports: Doctrine\ORM\PersistentCollection {#4034 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
  -id: 298599
  -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6574648"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964972 {#3983
    date: 2024-01-11 10:22:52.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#4042
  +user: App\Entity\User {#3991 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Life is too short to install everything on baremetal."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721731699 {#4051
    date: 2024-07-23 12:48:19.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4040 …}
  +nested: Doctrine\ORM\PersistentCollection {#4038 …}
  +votes: Doctrine\ORM\PersistentCollection {#4036 …}
  +reports: Doctrine\ORM\PersistentCollection {#4034 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
  -id: 298599
  -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6574648"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704964972 {#3983
    date: 2024-01-11 10:22:52.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\EntryComment {#5254
  +user: Proxies\__CG__\App\Entity\User {#5255 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4042
    +user: App\Entity\User {#3991 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Life is too short to install everything on baremetal."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721731699 {#4051
      date: 2024-07-23 12:48:19.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4040 …}
    +nested: Doctrine\ORM\PersistentCollection {#4038 …}
    +votes: Doctrine\ORM\PersistentCollection {#4036 …}
    +reports: Doctrine\ORM\PersistentCollection {#4034 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
    -id: 298599
    -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6574648"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964972 {#3983
      date: 2024-01-11 10:22:52.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4042}
  +body: "For real, at the minimum use a virtual machine."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1705052625 {#5252
    date: 2024-01-12 10:43:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5256 …}
  +nested: Doctrine\ORM\PersistentCollection {#5258 …}
  +votes: Doctrine\ORM\PersistentCollection {#5260 …}
  +reports: Doctrine\ORM\PersistentCollection {#5262 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5264 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5266 …}
  -id: 301523
  -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6374060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705052625 {#5253
    date: 2024-01-12 10:43:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\EntryComment {#5254
  +user: Proxies\__CG__\App\Entity\User {#5255 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4042
    +user: App\Entity\User {#3991 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Life is too short to install everything on baremetal."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721731699 {#4051
      date: 2024-07-23 12:48:19.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4040 …}
    +nested: Doctrine\ORM\PersistentCollection {#4038 …}
    +votes: Doctrine\ORM\PersistentCollection {#4036 …}
    +reports: Doctrine\ORM\PersistentCollection {#4034 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
    -id: 298599
    -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6574648"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964972 {#3983
      date: 2024-01-11 10:22:52.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4042}
  +body: "For real, at the minimum use a virtual machine."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1705052625 {#5252
    date: 2024-01-12 10:43:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5256 …}
  +nested: Doctrine\ORM\PersistentCollection {#5258 …}
  +votes: Doctrine\ORM\PersistentCollection {#5260 …}
  +reports: Doctrine\ORM\PersistentCollection {#5262 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5264 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5266 …}
  -id: 301523
  -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6374060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705052625 {#5253
    date: 2024-01-12 10:43:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\EntryComment {#5254
  +user: Proxies\__CG__\App\Entity\User {#5255 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4042
    +user: App\Entity\User {#3991 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Life is too short to install everything on baremetal."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721731699 {#4051
      date: 2024-07-23 12:48:19.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4040 …}
    +nested: Doctrine\ORM\PersistentCollection {#4038 …}
    +votes: Doctrine\ORM\PersistentCollection {#4036 …}
    +reports: Doctrine\ORM\PersistentCollection {#4034 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
    -id: 298599
    -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6574648"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704964972 {#3983
      date: 2024-01-11 10:22:52.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4042}
  +body: "For real, at the minimum use a virtual machine."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1705052625 {#5252
    date: 2024-01-12 10:43:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5256 …}
  +nested: Doctrine\ORM\PersistentCollection {#5258 …}
  +votes: Doctrine\ORM\PersistentCollection {#5260 …}
  +reports: Doctrine\ORM\PersistentCollection {#5262 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5264 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5266 …}
  -id: 301523
  -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6374060"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705052625 {#5253
    date: 2024-01-12 10:43:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
14 DENIED moderate 
App\Entity\EntryComment {#5354
  +user: Proxies\__CG__\App\Entity\User {#5355 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5254
    +user: Proxies\__CG__\App\Entity\User {#5255 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4042
      +user: App\Entity\User {#3991 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Life is too short to install everything on baremetal."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 33
      +score: 0
      +lastActive: DateTime @1721731699 {#4051
        date: 2024-07-23 12:48:19.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4040 …}
      +nested: Doctrine\ORM\PersistentCollection {#4038 …}
      +votes: Doctrine\ORM\PersistentCollection {#4036 …}
      +reports: Doctrine\ORM\PersistentCollection {#4034 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
      -id: 298599
      -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6574648"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704964972 {#3983
        date: 2024-01-11 10:22:52.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4042}
    +body: "For real, at the minimum use a virtual machine."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1705052625 {#5252
      date: 2024-01-12 10:43:45.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@shalva97@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5256 …}
    +nested: Doctrine\ORM\PersistentCollection {#5258 …}
    +votes: Doctrine\ORM\PersistentCollection {#5260 …}
    +reports: Doctrine\ORM\PersistentCollection {#5262 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5264 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5266 …}
    -id: 301523
    -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6374060"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705052625 {#5253
      date: 2024-01-12 10:43:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4042}
  +body: "Use lxc/lxd to get all of the performance benefits of docker and all the freedom of a vm"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705070754 {#5352
    date: 2024-01-12 15:45:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
    "@purplemonkeymad@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5356 …}
  +nested: Doctrine\ORM\PersistentCollection {#5358 …}
  +votes: Doctrine\ORM\PersistentCollection {#5360 …}
  +reports: Doctrine\ORM\PersistentCollection {#5362 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5364 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5366 …}
  -id: 302106
  -bodyTs: "'benefit':9 'docker':11 'freedom':15 'get':4 'lxc/lxd':2 'perform':8 'use':1 'vm':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8190509"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705070754 {#5353
    date: 2024-01-12 15:45:54.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
15 DENIED edit 
App\Entity\EntryComment {#5354
  +user: Proxies\__CG__\App\Entity\User {#5355 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5254
    +user: Proxies\__CG__\App\Entity\User {#5255 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4042
      +user: App\Entity\User {#3991 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Life is too short to install everything on baremetal."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 33
      +score: 0
      +lastActive: DateTime @1721731699 {#4051
        date: 2024-07-23 12:48:19.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4040 …}
      +nested: Doctrine\ORM\PersistentCollection {#4038 …}
      +votes: Doctrine\ORM\PersistentCollection {#4036 …}
      +reports: Doctrine\ORM\PersistentCollection {#4034 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
      -id: 298599
      -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6574648"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704964972 {#3983
        date: 2024-01-11 10:22:52.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4042}
    +body: "For real, at the minimum use a virtual machine."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1705052625 {#5252
      date: 2024-01-12 10:43:45.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@shalva97@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5256 …}
    +nested: Doctrine\ORM\PersistentCollection {#5258 …}
    +votes: Doctrine\ORM\PersistentCollection {#5260 …}
    +reports: Doctrine\ORM\PersistentCollection {#5262 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5264 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5266 …}
    -id: 301523
    -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6374060"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705052625 {#5253
      date: 2024-01-12 10:43:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4042}
  +body: "Use lxc/lxd to get all of the performance benefits of docker and all the freedom of a vm"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705070754 {#5352
    date: 2024-01-12 15:45:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
    "@purplemonkeymad@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5356 …}
  +nested: Doctrine\ORM\PersistentCollection {#5358 …}
  +votes: Doctrine\ORM\PersistentCollection {#5360 …}
  +reports: Doctrine\ORM\PersistentCollection {#5362 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5364 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5366 …}
  -id: 302106
  -bodyTs: "'benefit':9 'docker':11 'freedom':15 'get':4 'lxc/lxd':2 'perform':8 'use':1 'vm':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8190509"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705070754 {#5353
    date: 2024-01-12 15:45:54.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
16 DENIED moderate 
App\Entity\EntryComment {#5354
  +user: Proxies\__CG__\App\Entity\User {#5355 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5254
    +user: Proxies\__CG__\App\Entity\User {#5255 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4042
      +user: App\Entity\User {#3991 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "Life is too short to install everything on baremetal."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 33
      +score: 0
      +lastActive: DateTime @1721731699 {#4051
        date: 2024-07-23 12:48:19.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4040 …}
      +nested: Doctrine\ORM\PersistentCollection {#4038 …}
      +votes: Doctrine\ORM\PersistentCollection {#4036 …}
      +reports: Doctrine\ORM\PersistentCollection {#4034 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4002 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4006 …}
      -id: 298599
      -bodyTs: "'baremet':9 'everyth':7 'instal':6 'life':1 'short':4"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6574648"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704964972 {#3983
        date: 2024-01-11 10:22:52.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4042}
    +body: "For real, at the minimum use a virtual machine."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 3
    +score: 0
    +lastActive: DateTime @1705052625 {#5252
      date: 2024-01-12 10:43:45.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@shalva97@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5256 …}
    +nested: Doctrine\ORM\PersistentCollection {#5258 …}
    +votes: Doctrine\ORM\PersistentCollection {#5260 …}
    +reports: Doctrine\ORM\PersistentCollection {#5262 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5264 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5266 …}
    -id: 301523
    -bodyTs: "'machin':9 'minimum':5 'real':2 'use':6 'virtual':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6374060"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705052625 {#5253
      date: 2024-01-12 10:43:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4042}
  +body: "Use lxc/lxd to get all of the performance benefits of docker and all the freedom of a vm"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1705070754 {#5352
    date: 2024-01-12 15:45:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@shalva97@lemmy.world"
    "@purplemonkeymad@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5356 …}
  +nested: Doctrine\ORM\PersistentCollection {#5358 …}
  +votes: Doctrine\ORM\PersistentCollection {#5360 …}
  +reports: Doctrine\ORM\PersistentCollection {#5362 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5364 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5366 …}
  -id: 302106
  -bodyTs: "'benefit':9 'docker':11 'freedom':15 'get':4 'lxc/lxd':2 'perform':8 'use':1 'vm':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8190509"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705070754 {#5353
    date: 2024-01-12 15:45:54.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
18 DENIED moderate 
App\Entity\EntryComment {#4088
  +user: App\Entity\User {#4072 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    people are rebuffing the criticism already.\n
    \n
    heres the main advantage imo:\n
    \n
    no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
    \n
    docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
    \n
    much easier to maintain once you get the hang of things.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721775014 {#4094
    date: 2024-07-24 00:50:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4080 …}
  +nested: Doctrine\ORM\PersistentCollection {#4083 …}
  +votes: Doctrine\ORM\PersistentCollection {#4081 …}
  +reports: Doctrine\ORM\PersistentCollection {#4079 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4078 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4069 …}
  -id: 297786
  -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7241901"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704931562 {#4092
    date: 2024-01-11 01:06:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
19 DENIED edit 
App\Entity\EntryComment {#4088
  +user: App\Entity\User {#4072 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    people are rebuffing the criticism already.\n
    \n
    heres the main advantage imo:\n
    \n
    no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
    \n
    docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
    \n
    much easier to maintain once you get the hang of things.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721775014 {#4094
    date: 2024-07-24 00:50:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4080 …}
  +nested: Doctrine\ORM\PersistentCollection {#4083 …}
  +votes: Doctrine\ORM\PersistentCollection {#4081 …}
  +reports: Doctrine\ORM\PersistentCollection {#4079 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4078 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4069 …}
  -id: 297786
  -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7241901"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704931562 {#4092
    date: 2024-01-11 01:06:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
20 DENIED moderate 
App\Entity\EntryComment {#4088
  +user: App\Entity\User {#4072 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    people are rebuffing the criticism already.\n
    \n
    heres the main advantage imo:\n
    \n
    no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
    \n
    docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
    \n
    much easier to maintain once you get the hang of things.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 33
  +score: 0
  +lastActive: DateTime @1721775014 {#4094
    date: 2024-07-24 00:50:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4080 …}
  +nested: Doctrine\ORM\PersistentCollection {#4083 …}
  +votes: Doctrine\ORM\PersistentCollection {#4081 …}
  +reports: Doctrine\ORM\PersistentCollection {#4079 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4078 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4069 …}
  -id: 297786
  -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7241901"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704931562 {#4092
    date: 2024-01-11 01:06:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
22 DENIED moderate 
App\Entity\EntryComment {#5238
  +user: Proxies\__CG__\App\Entity\User {#5239 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4088
    +user: App\Entity\User {#4072 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      people are rebuffing the criticism already.\n
      \n
      heres the main advantage imo:\n
      \n
      no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
      \n
      docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
      \n
      much easier to maintain once you get the hang of things.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721775014 {#4094
      date: 2024-07-24 00:50:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4080 …}
    +nested: Doctrine\ORM\PersistentCollection {#4083 …}
    +votes: Doctrine\ORM\PersistentCollection {#4081 …}
    +reports: Doctrine\ORM\PersistentCollection {#4079 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4078 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4069 …}
    -id: 297786
    -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7241901"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704931562 {#4092
      date: 2024-01-11 01:06:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4088}
  +body: "Quick addition, I think for the messy argument the way I would articulate it for folks running servers is it helps you move from [pets to cattle.](https://devops.stackexchange.com/a/654)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705074594 {#5236
    date: 2024-01-12 16:49:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@umbrella@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5240 …}
  +nested: Doctrine\ORM\PersistentCollection {#5242 …}
  +votes: Doctrine\ORM\PersistentCollection {#5244 …}
  +reports: Doctrine\ORM\PersistentCollection {#5246 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5248 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5250 …}
  -id: 302268
  -bodyTs: "'/a/654)':30 'addit':2 'argument':8 'articul':13 'cattl':27 'devops.stackexchange.com':29 'devops.stackexchange.com/a/654)':28 'folk':16 'help':21 'messi':7 'move':23 'pet':25 'quick':1 'run':17 'server':18 'think':4 'way':10 'would':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6623711"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705074594 {#5237
    date: 2024-01-12 16:49:54.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
23 DENIED edit 
App\Entity\EntryComment {#5238
  +user: Proxies\__CG__\App\Entity\User {#5239 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4088
    +user: App\Entity\User {#4072 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      people are rebuffing the criticism already.\n
      \n
      heres the main advantage imo:\n
      \n
      no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
      \n
      docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
      \n
      much easier to maintain once you get the hang of things.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721775014 {#4094
      date: 2024-07-24 00:50:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4080 …}
    +nested: Doctrine\ORM\PersistentCollection {#4083 …}
    +votes: Doctrine\ORM\PersistentCollection {#4081 …}
    +reports: Doctrine\ORM\PersistentCollection {#4079 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4078 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4069 …}
    -id: 297786
    -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7241901"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704931562 {#4092
      date: 2024-01-11 01:06:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4088}
  +body: "Quick addition, I think for the messy argument the way I would articulate it for folks running servers is it helps you move from [pets to cattle.](https://devops.stackexchange.com/a/654)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705074594 {#5236
    date: 2024-01-12 16:49:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@umbrella@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5240 …}
  +nested: Doctrine\ORM\PersistentCollection {#5242 …}
  +votes: Doctrine\ORM\PersistentCollection {#5244 …}
  +reports: Doctrine\ORM\PersistentCollection {#5246 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5248 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5250 …}
  -id: 302268
  -bodyTs: "'/a/654)':30 'addit':2 'argument':8 'articul':13 'cattl':27 'devops.stackexchange.com':29 'devops.stackexchange.com/a/654)':28 'folk':16 'help':21 'messi':7 'move':23 'pet':25 'quick':1 'run':17 'server':18 'think':4 'way':10 'would':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6623711"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705074594 {#5237
    date: 2024-01-12 16:49:54.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
24 DENIED moderate 
App\Entity\EntryComment {#5238
  +user: Proxies\__CG__\App\Entity\User {#5239 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4088
    +user: App\Entity\User {#4072 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      people are rebuffing the criticism already.\n
      \n
      heres the main advantage imo:\n
      \n
      no messy system or leftovers. some programs use directories all over the place and it gets annoying fast if you host many services. sometimes you will have some issue that requires you to do quite a bit of hunting and redoing things.\n
      \n
      docker makes this painless. you can deploy and redeploy stuff easily and quickly, without a mess. updates are painless and quick too, with everything neatly self-contained.\n
      \n
      much easier to maintain once you get the hang of things.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 33
    +score: 0
    +lastActive: DateTime @1721775014 {#4094
      date: 2024-07-24 00:50:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4080 …}
    +nested: Doctrine\ORM\PersistentCollection {#4083 …}
    +votes: Doctrine\ORM\PersistentCollection {#4081 …}
    +reports: Doctrine\ORM\PersistentCollection {#4079 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4078 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4069 …}
    -id: 297786
    -bodyTs: "'advantag':10 'alreadi':6 'annoy':28 'bit':48 'contain':81 'critic':5 'deploy':60 'directori':20 'docker':54 'easier':83 'easili':64 'everyth':77 'fast':29 'get':27,88 'hang':90 'here':7 'host':32 'hunt':50 'imo':11 'issu':40 'leftov':16 'main':9 'maintain':85 'make':55 'mani':33 'mess':69 'messi':13 'much':82 'neat':78 'painless':57,72 'peopl':1 'place':24 'program':18 'quick':66,74 'quit':46 'rebuf':3 'redeploy':62 'redo':52 'requir':42 'self':80 'self-contain':79 'servic':34 'sometim':35 'stuff':63 'system':14 'thing':53,92 'updat':70 'use':19 'without':67"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.ml/comment/7241901"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704931562 {#4092
      date: 2024-01-11 01:06:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4088}
  +body: "Quick addition, I think for the messy argument the way I would articulate it for folks running servers is it helps you move from [pets to cattle.](https://devops.stackexchange.com/a/654)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705074594 {#5236
    date: 2024-01-12 16:49:54.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@umbrella@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5240 …}
  +nested: Doctrine\ORM\PersistentCollection {#5242 …}
  +votes: Doctrine\ORM\PersistentCollection {#5244 …}
  +reports: Doctrine\ORM\PersistentCollection {#5246 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5248 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5250 …}
  -id: 302268
  -bodyTs: "'/a/654)':30 'addit':2 'argument':8 'articul':13 'cattl':27 'devops.stackexchange.com':29 'devops.stackexchange.com/a/654)':28 'folk':16 'help':21 'messi':7 'move':23 'pet':25 'quick':1 'run':17 'server':18 'think':4 'way':10 'would':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6623711"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705074594 {#5237
    date: 2024-01-12 16:49:54.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
26 DENIED moderate 
App\Entity\EntryComment {#4157
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Imo, yes.\n
    \n
    - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
    - run apps without dependency hell\n
    - even if someone breaks in, they’re not in your system but in a container\n
    - have everything web facing separate from the rest\n
    - get per app resource statistics\n
    \n
    Those are just what was in my head. Probably more to be said.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1721939373 {#4151
    date: 2024-07-25 22:29:33.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4158 …}
  +nested: Doctrine\ORM\PersistentCollection {#4160 …}
  +votes: Doctrine\ORM\PersistentCollection {#4162 …}
  +reports: Doctrine\ORM\PersistentCollection {#4164 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
  -id: 298945
  -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/400498"
  +editedAt: DateTimeImmutable @1720862100 {#4152
    date: 2024-07-13 11:15:00.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704981658 {#4153
    date: 2024-01-11 15:00:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
27 DENIED edit 
App\Entity\EntryComment {#4157
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Imo, yes.\n
    \n
    - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
    - run apps without dependency hell\n
    - even if someone breaks in, they’re not in your system but in a container\n
    - have everything web facing separate from the rest\n
    - get per app resource statistics\n
    \n
    Those are just what was in my head. Probably more to be said.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1721939373 {#4151
    date: 2024-07-25 22:29:33.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4158 …}
  +nested: Doctrine\ORM\PersistentCollection {#4160 …}
  +votes: Doctrine\ORM\PersistentCollection {#4162 …}
  +reports: Doctrine\ORM\PersistentCollection {#4164 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
  -id: 298945
  -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/400498"
  +editedAt: DateTimeImmutable @1720862100 {#4152
    date: 2024-07-13 11:15:00.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704981658 {#4153
    date: 2024-01-11 15:00:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
28 DENIED moderate 
App\Entity\EntryComment {#4157
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Imo, yes.\n
    \n
    - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
    - run apps without dependency hell\n
    - even if someone breaks in, they’re not in your system but in a container\n
    - have everything web facing separate from the rest\n
    - get per app resource statistics\n
    \n
    Those are just what was in my head. Probably more to be said.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1721939373 {#4151
    date: 2024-07-25 22:29:33.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4158 …}
  +nested: Doctrine\ORM\PersistentCollection {#4160 …}
  +votes: Doctrine\ORM\PersistentCollection {#4162 …}
  +reports: Doctrine\ORM\PersistentCollection {#4164 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
  -id: 298945
  -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/400498"
  +editedAt: DateTimeImmutable @1720862100 {#4152
    date: 2024-07-13 11:15:00.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704981658 {#4153
    date: 2024-01-11 15:00:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
30 DENIED moderate 
App\Entity\EntryComment {#5270
  +user: Proxies\__CG__\App\Entity\User {#5271 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4157
    +user: App\Entity\User {#4170 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4151
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4158 …}
    +nested: Doctrine\ORM\PersistentCollection {#4160 …}
    +votes: Doctrine\ORM\PersistentCollection {#4162 …}
    +reports: Doctrine\ORM\PersistentCollection {#4164 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4152
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4153
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705079798 {#5268
    date: 2024-01-12 18:16:38.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5272 …}
  +nested: Doctrine\ORM\PersistentCollection {#5274 …}
  +votes: Doctrine\ORM\PersistentCollection {#5276 …}
  +reports: Doctrine\ORM\PersistentCollection {#5278 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5280 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5282 …}
  -id: 302538
  -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705079798 {#5269
    date: 2024-01-12 18:16:38.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
31 DENIED edit 
App\Entity\EntryComment {#5270
  +user: Proxies\__CG__\App\Entity\User {#5271 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4157
    +user: App\Entity\User {#4170 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4151
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4158 …}
    +nested: Doctrine\ORM\PersistentCollection {#4160 …}
    +votes: Doctrine\ORM\PersistentCollection {#4162 …}
    +reports: Doctrine\ORM\PersistentCollection {#4164 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4152
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4153
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705079798 {#5268
    date: 2024-01-12 18:16:38.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5272 …}
  +nested: Doctrine\ORM\PersistentCollection {#5274 …}
  +votes: Doctrine\ORM\PersistentCollection {#5276 …}
  +reports: Doctrine\ORM\PersistentCollection {#5278 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5280 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5282 …}
  -id: 302538
  -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705079798 {#5269
    date: 2024-01-12 18:16:38.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
32 DENIED moderate 
App\Entity\EntryComment {#5270
  +user: Proxies\__CG__\App\Entity\User {#5271 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4157
    +user: App\Entity\User {#4170 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4151
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4158 …}
    +nested: Doctrine\ORM\PersistentCollection {#4160 …}
    +votes: Doctrine\ORM\PersistentCollection {#4162 …}
    +reports: Doctrine\ORM\PersistentCollection {#4164 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4152
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4153
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705079798 {#5268
    date: 2024-01-12 18:16:38.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5272 …}
  +nested: Doctrine\ORM\PersistentCollection {#5274 …}
  +votes: Doctrine\ORM\PersistentCollection {#5276 …}
  +reports: Doctrine\ORM\PersistentCollection {#5278 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5280 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5282 …}
  -id: 302538
  -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7460511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705079798 {#5269
    date: 2024-01-12 18:16:38.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
34 DENIED moderate 
App\Entity\EntryComment {#5385
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5270
    +user: Proxies\__CG__\App\Entity\User {#5271 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4157
      +user: App\Entity\User {#4170 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4151
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4158 …}
      +nested: Doctrine\ORM\PersistentCollection {#4160 …}
      +votes: Doctrine\ORM\PersistentCollection {#4162 …}
      +reports: Doctrine\ORM\PersistentCollection {#4164 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4152
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4153
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4157}
    +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705079798 {#5268
      date: 2024-01-12 18:16:38.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5272 …}
    +nested: Doctrine\ORM\PersistentCollection {#5274 …}
    +votes: Doctrine\ORM\PersistentCollection {#5276 …}
    +reports: Doctrine\ORM\PersistentCollection {#5278 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5280 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5282 …}
    -id: 302538
    -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7460511"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705079798 {#5269
      date: 2024-01-12 18:16:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "*in that container, not in the system"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705085485 {#5383
    date: 2024-01-12 19:51:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@Gooey0210@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5386 …}
  +nested: Doctrine\ORM\PersistentCollection {#5388 …}
  +votes: Doctrine\ORM\PersistentCollection {#5390 …}
  +reports: Doctrine\ORM\PersistentCollection {#5392 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5394 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5396 …}
  -id: 302811
  -bodyTs: "'contain':3 'system':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407223"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705085485 {#5384
    date: 2024-01-12 19:51:25.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
35 DENIED edit 
App\Entity\EntryComment {#5385
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5270
    +user: Proxies\__CG__\App\Entity\User {#5271 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4157
      +user: App\Entity\User {#4170 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4151
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4158 …}
      +nested: Doctrine\ORM\PersistentCollection {#4160 …}
      +votes: Doctrine\ORM\PersistentCollection {#4162 …}
      +reports: Doctrine\ORM\PersistentCollection {#4164 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4152
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4153
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4157}
    +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705079798 {#5268
      date: 2024-01-12 18:16:38.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5272 …}
    +nested: Doctrine\ORM\PersistentCollection {#5274 …}
    +votes: Doctrine\ORM\PersistentCollection {#5276 …}
    +reports: Doctrine\ORM\PersistentCollection {#5278 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5280 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5282 …}
    -id: 302538
    -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7460511"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705079798 {#5269
      date: 2024-01-12 18:16:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "*in that container, not in the system"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705085485 {#5383
    date: 2024-01-12 19:51:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@Gooey0210@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5386 …}
  +nested: Doctrine\ORM\PersistentCollection {#5388 …}
  +votes: Doctrine\ORM\PersistentCollection {#5390 …}
  +reports: Doctrine\ORM\PersistentCollection {#5392 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5394 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5396 …}
  -id: 302811
  -bodyTs: "'contain':3 'system':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407223"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705085485 {#5384
    date: 2024-01-12 19:51:25.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
36 DENIED moderate 
App\Entity\EntryComment {#5385
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5270
    +user: Proxies\__CG__\App\Entity\User {#5271 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4157
      +user: App\Entity\User {#4170 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4151
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4158 …}
      +nested: Doctrine\ORM\PersistentCollection {#4160 …}
      +votes: Doctrine\ORM\PersistentCollection {#4162 …}
      +reports: Doctrine\ORM\PersistentCollection {#4164 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4152
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4153
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4157}
    +body: "3. Even if someone breaks in, they are not a user, but root 🤝"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1705079798 {#5268
      date: 2024-01-12 18:16:38.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5272 …}
    +nested: Doctrine\ORM\PersistentCollection {#5274 …}
    +votes: Doctrine\ORM\PersistentCollection {#5276 …}
    +reports: Doctrine\ORM\PersistentCollection {#5278 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5280 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5282 …}
    -id: 302538
    -bodyTs: "'3':1 'break':5 'even':2 'root':13 'someon':4 'user':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7460511"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705079798 {#5269
      date: 2024-01-12 18:16:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "*in that container, not in the system"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1705085485 {#5383
    date: 2024-01-12 19:51:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@Gooey0210@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5386 …}
  +nested: Doctrine\ORM\PersistentCollection {#5388 …}
  +votes: Doctrine\ORM\PersistentCollection {#5390 …}
  +reports: Doctrine\ORM\PersistentCollection {#5392 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5394 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5396 …}
  -id: 302811
  -bodyTs: "'contain':3 'system':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407223"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705085485 {#5384
    date: 2024-01-12 19:51:25.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
38 DENIED moderate 
App\Entity\EntryComment {#5286
  +user: Proxies\__CG__\App\Entity\User {#5287 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4157
    +user: App\Entity\User {#4170 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4151
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4158 …}
    +nested: Doctrine\ORM\PersistentCollection {#4160 …}
    +votes: Doctrine\ORM\PersistentCollection {#4162 …}
    +reports: Doctrine\ORM\PersistentCollection {#4164 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4152
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4153
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1705076009 {#5284
    date: 2024-01-12 17:13:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5288 …}
  +nested: Doctrine\ORM\PersistentCollection {#5290 …}
  +votes: Doctrine\ORM\PersistentCollection {#5292 …}
  +reports: Doctrine\ORM\PersistentCollection {#5294 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5296 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5298 …}
  -id: 302315
  -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8192614"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705076009 {#5285
    date: 2024-01-12 17:13:29.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
39 DENIED edit 
App\Entity\EntryComment {#5286
  +user: Proxies\__CG__\App\Entity\User {#5287 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4157
    +user: App\Entity\User {#4170 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4151
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4158 …}
    +nested: Doctrine\ORM\PersistentCollection {#4160 …}
    +votes: Doctrine\ORM\PersistentCollection {#4162 …}
    +reports: Doctrine\ORM\PersistentCollection {#4164 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4152
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4153
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1705076009 {#5284
    date: 2024-01-12 17:13:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5288 …}
  +nested: Doctrine\ORM\PersistentCollection {#5290 …}
  +votes: Doctrine\ORM\PersistentCollection {#5292 …}
  +reports: Doctrine\ORM\PersistentCollection {#5294 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5296 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5298 …}
  -id: 302315
  -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8192614"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705076009 {#5285
    date: 2024-01-12 17:13:29.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
40 DENIED moderate 
App\Entity\EntryComment {#5286
  +user: Proxies\__CG__\App\Entity\User {#5287 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4157
    +user: App\Entity\User {#4170 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Imo, yes.\n
      \n
      - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
      - run apps without dependency hell\n
      - even if someone breaks in, they’re not in your system but in a container\n
      - have everything web facing separate from the rest\n
      - get per app resource statistics\n
      \n
      Those are just what was in my head. Probably more to be said.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1721939373 {#4151
      date: 2024-07-25 22:29:33.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4158 …}
    +nested: Doctrine\ORM\PersistentCollection {#4160 …}
    +votes: Doctrine\ORM\PersistentCollection {#4162 …}
    +reports: Doctrine\ORM\PersistentCollection {#4164 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
    -id: 298945
    -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.giftedmc.com/comment/400498"
    +editedAt: DateTimeImmutable @1720862100 {#4152
      date: 2024-07-13 11:15:00.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704981658 {#4153
      date: 2024-01-11 15:00:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1705076009 {#5284
    date: 2024-01-12 17:13:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5288 …}
  +nested: Doctrine\ORM\PersistentCollection {#5290 …}
  +votes: Doctrine\ORM\PersistentCollection {#5292 …}
  +reports: Doctrine\ORM\PersistentCollection {#5294 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5296 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5298 …}
  -id: 302315
  -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8192614"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705076009 {#5285
    date: 2024-01-12 17:13:29.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
41 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
42 DENIED moderate 
App\Entity\EntryComment {#5370
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5286
    +user: Proxies\__CG__\App\Entity\User {#5287 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4157
      +user: App\Entity\User {#4170 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4151
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4158 …}
      +nested: Doctrine\ORM\PersistentCollection {#4160 …}
      +votes: Doctrine\ORM\PersistentCollection {#4162 …}
      +reports: Doctrine\ORM\PersistentCollection {#4164 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4152
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4153
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4157}
    +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 4
    +score: 0
    +lastActive: DateTime @1705076009 {#5284
      date: 2024-01-12 17:13:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5288 …}
    +nested: Doctrine\ORM\PersistentCollection {#5290 …}
    +votes: Doctrine\ORM\PersistentCollection {#5292 …}
    +reports: Doctrine\ORM\PersistentCollection {#5294 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5296 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5298 …}
    -id: 302315
    -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8192614"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705076009 {#5285
      date: 2024-01-12 17:13:29.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "I havent actually tried that. Might need to check it out. :)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705086049 {#5368
    date: 2024-01-12 20:00:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@invertedspear@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5371 …}
  +nested: Doctrine\ORM\PersistentCollection {#5373 …}
  +votes: Doctrine\ORM\PersistentCollection {#5375 …}
  +reports: Doctrine\ORM\PersistentCollection {#5377 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5379 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5381 …}
  -id: 302847
  -bodyTs: "'actual':3 'check':9 'havent':2 'might':6 'need':7 'tri':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407281"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705086049 {#5369
    date: 2024-01-12 20:00:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
43 DENIED edit 
App\Entity\EntryComment {#5370
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5286
    +user: Proxies\__CG__\App\Entity\User {#5287 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4157
      +user: App\Entity\User {#4170 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4151
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4158 …}
      +nested: Doctrine\ORM\PersistentCollection {#4160 …}
      +votes: Doctrine\ORM\PersistentCollection {#4162 …}
      +reports: Doctrine\ORM\PersistentCollection {#4164 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4152
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4153
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4157}
    +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 4
    +score: 0
    +lastActive: DateTime @1705076009 {#5284
      date: 2024-01-12 17:13:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5288 …}
    +nested: Doctrine\ORM\PersistentCollection {#5290 …}
    +votes: Doctrine\ORM\PersistentCollection {#5292 …}
    +reports: Doctrine\ORM\PersistentCollection {#5294 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5296 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5298 …}
    -id: 302315
    -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8192614"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705076009 {#5285
      date: 2024-01-12 17:13:29.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "I havent actually tried that. Might need to check it out. :)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705086049 {#5368
    date: 2024-01-12 20:00:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@invertedspear@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5371 …}
  +nested: Doctrine\ORM\PersistentCollection {#5373 …}
  +votes: Doctrine\ORM\PersistentCollection {#5375 …}
  +reports: Doctrine\ORM\PersistentCollection {#5377 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5379 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5381 …}
  -id: 302847
  -bodyTs: "'actual':3 'check':9 'havent':2 'might':6 'need':7 'tri':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407281"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705086049 {#5369
    date: 2024-01-12 20:00:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
44 DENIED moderate 
App\Entity\EntryComment {#5370
  +user: App\Entity\User {#4170 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5286
    +user: Proxies\__CG__\App\Entity\User {#5287 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4157
      +user: App\Entity\User {#4170 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Imo, yes.\n
        \n
        - only run containers from trusted sources (btw. google, ms, apple have proven they cant be trusted either)\n
        - run apps without dependency hell\n
        - even if someone breaks in, they’re not in your system but in a container\n
        - have everything web facing separate from the rest\n
        - get per app resource statistics\n
        \n
        Those are just what was in my head. Probably more to be said.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 28
      +score: 0
      +lastActive: DateTime @1721939373 {#4151
        date: 2024-07-25 22:29:33.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4158 …}
      +nested: Doctrine\ORM\PersistentCollection {#4160 …}
      +votes: Doctrine\ORM\PersistentCollection {#4162 …}
      +reports: Doctrine\ORM\PersistentCollection {#4164 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4166 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4168 …}
      -id: 298945
      -bodyTs: "'app':21,50 'appl':12 'break':28 'btw':9 'cant':16 'contain':5,39 'depend':23 'either':19 'even':25 'everyth':41 'face':43 'get':48 'googl':10 'head':60 'hell':24 'imo':1 'ms':11 'per':49 'probabl':61 'proven':14 're':31 'resourc':51 'rest':47 'run':4,20 'said':65 'separ':44 'someon':27 'sourc':8 'statist':52 'system':35 'trust':7,18 'web':42 'without':22 'yes':2"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.giftedmc.com/comment/400498"
      +editedAt: DateTimeImmutable @1720862100 {#4152
        date: 2024-07-13 11:15:00.0 +02:00
      }
      +createdAt: DateTimeImmutable @1704981658 {#4153
        date: 2024-01-11 15:00:58.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4157}
    +body: "Also the ability to snapshot an image, goof around with changes, and if you don’t like them restore the snapshot makes it much easier to experiment than trying to unwind all the changes you make."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 4
    +score: 0
    +lastActive: DateTime @1705076009 {#5284
      date: 2024-01-12 17:13:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@haui_lemmy@lemmy.giftedmc.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5288 …}
    +nested: Doctrine\ORM\PersistentCollection {#5290 …}
    +votes: Doctrine\ORM\PersistentCollection {#5292 …}
    +reports: Doctrine\ORM\PersistentCollection {#5294 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5296 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5298 …}
    -id: 302315
    -bodyTs: "'abil':3 'also':1 'around':9 'chang':11,34 'easier':25 'experi':27 'goof':8 'imag':7 'like':17 'make':22,36 'much':24 'restor':19 'snapshot':5,21 'tri':29 'unwind':31"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8192614"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705076009 {#5285
      date: 2024-01-12 17:13:29.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4157}
  +body: "I havent actually tried that. Might need to check it out. :)"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705086049 {#5368
    date: 2024-01-12 20:00:49.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@haui_lemmy@lemmy.giftedmc.com"
    "@invertedspear@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5371 …}
  +nested: Doctrine\ORM\PersistentCollection {#5373 …}
  +votes: Doctrine\ORM\PersistentCollection {#5375 …}
  +reports: Doctrine\ORM\PersistentCollection {#5377 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5379 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5381 …}
  -id: 302847
  -bodyTs: "'actual':3 'check':9 'havent':2 'might':6 'need':7 'tri':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.giftedmc.com/comment/407281"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705086049 {#5369
    date: 2024-01-12 20:00:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
45 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
46 DENIED moderate 
App\Entity\EntryComment {#4231
  +user: App\Entity\User {#4244 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
    \n
    The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
    \n
    If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
    \n
    Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
    \n
    Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
    \n
    Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1720532755 {#4226
    date: 2024-07-09 15:45:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4232 …}
  +nested: Doctrine\ORM\PersistentCollection {#4234 …}
  +votes: Doctrine\ORM\PersistentCollection {#4236 …}
  +reports: Doctrine\ORM\PersistentCollection {#4238 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4240 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4242 …}
  -id: 297660
  -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4826104"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928662 {#4227
    date: 2024-01-11 00:17:42.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
47 DENIED edit 
App\Entity\EntryComment {#4231
  +user: App\Entity\User {#4244 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
    \n
    The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
    \n
    If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
    \n
    Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
    \n
    Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
    \n
    Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1720532755 {#4226
    date: 2024-07-09 15:45:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4232 …}
  +nested: Doctrine\ORM\PersistentCollection {#4234 …}
  +votes: Doctrine\ORM\PersistentCollection {#4236 …}
  +reports: Doctrine\ORM\PersistentCollection {#4238 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4240 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4242 …}
  -id: 297660
  -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4826104"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928662 {#4227
    date: 2024-01-11 00:17:42.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
48 DENIED moderate 
App\Entity\EntryComment {#4231
  +user: App\Entity\User {#4244 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
    \n
    The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
    \n
    If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
    \n
    Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
    \n
    Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
    \n
    Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 28
  +score: 0
  +lastActive: DateTime @1720532755 {#4226
    date: 2024-07-09 15:45:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4232 …}
  +nested: Doctrine\ORM\PersistentCollection {#4234 …}
  +votes: Doctrine\ORM\PersistentCollection {#4236 …}
  +reports: Doctrine\ORM\PersistentCollection {#4238 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4240 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4242 …}
  -id: 297660
  -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4826104"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928662 {#4227
    date: 2024-01-11 00:17:42.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
49 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
50 DENIED moderate 
App\Entity\EntryComment {#5222
  +user: Proxies\__CG__\App\Entity\User {#5223 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4231
    +user: App\Entity\User {#4244 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
      \n
      The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
      \n
      If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
      \n
      Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
      \n
      Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
      \n
      Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1720532755 {#4226
      date: 2024-07-09 15:45:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4232 …}
    +nested: Doctrine\ORM\PersistentCollection {#4234 …}
    +votes: Doctrine\ORM\PersistentCollection {#4236 …}
    +reports: Doctrine\ORM\PersistentCollection {#4238 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4240 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4242 …}
    -id: 297660
    -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4826104"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704928662 {#4227
      date: 2024-01-11 00:17:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4231}
  +body: "> the program is run* as root"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704942175 {#5220
    date: 2024-01-11 04:02:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Moonrise2473@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5224 …}
  +nested: Doctrine\ORM\PersistentCollection {#5226 …}
  +votes: Doctrine\ORM\PersistentCollection {#5228 …}
  +reports: Doctrine\ORM\PersistentCollection {#5230 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5232 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5234 …}
  -id: 298121
  -bodyTs: "'program':2 'root':6 'run':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6569069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704942175 {#5221
    date: 2024-01-11 04:02:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
51 DENIED edit 
App\Entity\EntryComment {#5222
  +user: Proxies\__CG__\App\Entity\User {#5223 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4231
    +user: App\Entity\User {#4244 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
      \n
      The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
      \n
      If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
      \n
      Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
      \n
      Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
      \n
      Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1720532755 {#4226
      date: 2024-07-09 15:45:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4232 …}
    +nested: Doctrine\ORM\PersistentCollection {#4234 …}
    +votes: Doctrine\ORM\PersistentCollection {#4236 …}
    +reports: Doctrine\ORM\PersistentCollection {#4238 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4240 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4242 …}
    -id: 297660
    -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4826104"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704928662 {#4227
      date: 2024-01-11 00:17:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4231}
  +body: "> the program is run* as root"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704942175 {#5220
    date: 2024-01-11 04:02:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Moonrise2473@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5224 …}
  +nested: Doctrine\ORM\PersistentCollection {#5226 …}
  +votes: Doctrine\ORM\PersistentCollection {#5228 …}
  +reports: Doctrine\ORM\PersistentCollection {#5230 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5232 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5234 …}
  -id: 298121
  -bodyTs: "'program':2 'root':6 'run':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6569069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704942175 {#5221
    date: 2024-01-11 04:02:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
52 DENIED moderate 
App\Entity\EntryComment {#5222
  +user: Proxies\__CG__\App\Entity\User {#5223 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4231
    +user: App\Entity\User {#4244 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      About the root problem, as of now new installs are trying to let the user to run everything as a limited user. And the program is ran as root *inside* the container so in order to escape from it the attacker would need a double zero day exploit (one for doing rce in the container, one to escape the container)\n
      \n
      The alternative to “don’t really know what’s in the image” usually is: “just download this Easy minified and incomprehensible trustmeimtotallynotavirus.sh script and run it as root”. Requires much more trust than a container that you can delete with no traces in literally seconds\n
      \n
      If the program that you want to run requires python modules or node modules then it will make much more mess on the system than a container.\n
      \n
      Downgrading to a previous version (or a beta preview) of the app you’re running due to bugs it’s trivial, you just change a tag and launch it again. Doing this on bare metal requires to be a terminal guru\n
      \n
      Finally, migrating to a new fresh server is just `docker compose down`, then rsync to new server, and then `docker compose up -d`. And not praying to ten different gods because after three years you forgot how did you install the app in bare metal like that.\n
      \n
      Docker is perfect for common people like us self hosting at home, the professionals at work use kubernetes
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 28
    +score: 0
    +lastActive: DateTime @1720532755 {#4226
      date: 2024-07-09 15:45:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4232 …}
    +nested: Doctrine\ORM\PersistentCollection {#4234 …}
    +votes: Doctrine\ORM\PersistentCollection {#4236 …}
    +reports: Doctrine\ORM\PersistentCollection {#4238 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4240 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4242 …}
    -id: 297660
    -bodyTs: "'altern':62 'app':144,215 'attack':41 'bare':166,217 'beta':140 'bug':150 'chang':156 'common':225 'compos':184,194 'contain':32,55,60,95,132 'd':196 'day':47 'delet':99 'differ':202 'docker':183,193,221 'doubl':45 'downgrad':133 'download':76 'due':148 'easi':78 'escap':37,58 'everyth':18 'exploit':48 'final':174 'forgot':209 'fresh':179 'god':203 'guru':173 'home':232 'host':230 'imag':72 'incomprehens':81 'insid':30 'instal':9,213 'know':67 'kubernet':238 'launch':160 'let':13 'like':219,227 'limit':21 'liter':104 'make':123 'mess':126 'metal':167,218 'migrat':175 'minifi':79 'modul':116,119 'much':90,124 'need':43 'new':8,178,189 'node':118 'one':49,56 'order':35 'peopl':226 'perfect':223 'pray':199 'preview':141 'previous':136 'problem':4 'profession':234 'program':25,108 'python':115 'ran':27 'rce':52 're':146 'realli':66 'requir':89,114,168 'root':3,29,88 'rsync':187 'run':17,85,113,147 'script':83 'second':105 'self':229 'server':180,190 'system':129 'tag':158 'ten':201 'termin':172 'three':206 'trace':102 'tri':11 'trivial':153 'trust':92 'trustmeimtotallynotavirus.sh':82 'us':228 'use':237 'user':15,22 'usual':73 'version':137 'want':111 'work':236 'would':42 'year':207 'zero':46"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4826104"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704928662 {#4227
      date: 2024-01-11 00:17:42.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4231}
  +body: "> the program is run* as root"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704942175 {#5220
    date: 2024-01-11 04:02:55.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Moonrise2473@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5224 …}
  +nested: Doctrine\ORM\PersistentCollection {#5226 …}
  +votes: Doctrine\ORM\PersistentCollection {#5228 …}
  +reports: Doctrine\ORM\PersistentCollection {#5230 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5232 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5234 …}
  -id: 298121
  -bodyTs: "'program':2 'root':6 'run':4"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6569069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704942175 {#5221
    date: 2024-01-11 04:02:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
53 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
54 DENIED moderate 
App\Entity\EntryComment {#4305
  +user: App\Entity\User {#4318 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    1.) No one runs rooted docker in prod. Everything is run rootless.\n
    \n
    2.) That’s just patently not true. `docker inspect` is your friend. Also you can build your own containers trusting no-one. `FROM Scratch` [hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)\n
    \n
    3.) I think mess here is subjective. Docker folders makes way more sense than Snap mounts.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 20
  +score: 0
  +lastActive: DateTime @1722359949 {#4299
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4306 …}
  +nested: Doctrine\ORM\PersistentCollection {#4308 …}
  +votes: Doctrine\ORM\PersistentCollection {#4310 …}
  +reports: Doctrine\ORM\PersistentCollection {#4312 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4314 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4316 …}
  -id: 296471
  -bodyTs: "'/_/scratch/](https://hub.docker.com/_/scratch/)':40 '1':1 '2':13 '3':41 'also':25 'build':28 'contain':31 'docker':6,20,48 'everyth':9 'folder':49 'friend':24 'hub.docker.com':39 'hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)':38 'inspect':21 'make':50 'mess':44 'mount':56 'no-on':33 'one':3,35 'patent':17 'prod':8 'root':5 'rootless':12 'run':4,11 'scratch':37 'sens':53 'snap':55 'subject':47 'think':43 'true':19 'trust':32 'way':51"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8113673"
  +editedAt: DateTimeImmutable @1720153951 {#4300
    date: 2024-07-05 06:32:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704907664 {#4301
    date: 2024-01-10 18:27:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
55 DENIED edit 
App\Entity\EntryComment {#4305
  +user: App\Entity\User {#4318 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    1.) No one runs rooted docker in prod. Everything is run rootless.\n
    \n
    2.) That’s just patently not true. `docker inspect` is your friend. Also you can build your own containers trusting no-one. `FROM Scratch` [hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)\n
    \n
    3.) I think mess here is subjective. Docker folders makes way more sense than Snap mounts.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 20
  +score: 0
  +lastActive: DateTime @1722359949 {#4299
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4306 …}
  +nested: Doctrine\ORM\PersistentCollection {#4308 …}
  +votes: Doctrine\ORM\PersistentCollection {#4310 …}
  +reports: Doctrine\ORM\PersistentCollection {#4312 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4314 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4316 …}
  -id: 296471
  -bodyTs: "'/_/scratch/](https://hub.docker.com/_/scratch/)':40 '1':1 '2':13 '3':41 'also':25 'build':28 'contain':31 'docker':6,20,48 'everyth':9 'folder':49 'friend':24 'hub.docker.com':39 'hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)':38 'inspect':21 'make':50 'mess':44 'mount':56 'no-on':33 'one':3,35 'patent':17 'prod':8 'root':5 'rootless':12 'run':4,11 'scratch':37 'sens':53 'snap':55 'subject':47 'think':43 'true':19 'trust':32 'way':51"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8113673"
  +editedAt: DateTimeImmutable @1720153951 {#4300
    date: 2024-07-05 06:32:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704907664 {#4301
    date: 2024-01-10 18:27:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
56 DENIED moderate 
App\Entity\EntryComment {#4305
  +user: App\Entity\User {#4318 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    1.) No one runs rooted docker in prod. Everything is run rootless.\n
    \n
    2.) That’s just patently not true. `docker inspect` is your friend. Also you can build your own containers trusting no-one. `FROM Scratch` [hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)\n
    \n
    3.) I think mess here is subjective. Docker folders makes way more sense than Snap mounts.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 20
  +score: 0
  +lastActive: DateTime @1722359949 {#4299
    date: 2024-07-30 19:19:09.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4306 …}
  +nested: Doctrine\ORM\PersistentCollection {#4308 …}
  +votes: Doctrine\ORM\PersistentCollection {#4310 …}
  +reports: Doctrine\ORM\PersistentCollection {#4312 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4314 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4316 …}
  -id: 296471
  -bodyTs: "'/_/scratch/](https://hub.docker.com/_/scratch/)':40 '1':1 '2':13 '3':41 'also':25 'build':28 'contain':31 'docker':6,20,48 'everyth':9 'folder':49 'friend':24 'hub.docker.com':39 'hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)':38 'inspect':21 'make':50 'mess':44 'mount':56 'no-on':33 'one':3,35 'patent':17 'prod':8 'root':5 'rootless':12 'run':4,11 'scratch':37 'sens':53 'snap':55 'subject':47 'think':43 'true':19 'trust':32 'way':51"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8113673"
  +editedAt: DateTimeImmutable @1720153951 {#4300
    date: 2024-07-05 06:32:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704907664 {#4301
    date: 2024-01-10 18:27:44.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
57 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
58 DENIED moderate 
App\Entity\EntryComment {#5173
  +user: Proxies\__CG__\App\Entity\User {#5174 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4305
    +user: App\Entity\User {#4318 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      1.) No one runs rooted docker in prod. Everything is run rootless.\n
      \n
      2.) That’s just patently not true. `docker inspect` is your friend. Also you can build your own containers trusting no-one. `FROM Scratch` [hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)\n
      \n
      3.) I think mess here is subjective. Docker folders makes way more sense than Snap mounts.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 20
    +score: 0
    +lastActive: DateTime @1722359949 {#4299
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4306 …}
    +nested: Doctrine\ORM\PersistentCollection {#4308 …}
    +votes: Doctrine\ORM\PersistentCollection {#4310 …}
    +reports: Doctrine\ORM\PersistentCollection {#4312 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4314 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4316 …}
    -id: 296471
    -bodyTs: "'/_/scratch/](https://hub.docker.com/_/scratch/)':40 '1':1 '2':13 '3':41 'also':25 'build':28 'contain':31 'docker':6,20,48 'everyth':9 'folder':49 'friend':24 'hub.docker.com':39 'hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)':38 'inspect':21 'make':50 'mess':44 'mount':56 'no-on':33 'one':3,35 'patent':17 'prod':8 'root':5 'rootless':12 'run':4,11 'scratch':37 'sens':53 'snap':55 'subject':47 'think':43 'true':19 'trust':32 'way':51"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8113673"
    +editedAt: DateTimeImmutable @1720153951 {#4300
      date: 2024-07-05 06:32:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704907664 {#4301
      date: 2024-01-10 18:27:44.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4305}
  +body: "1 is just not true sorry. There’s loads of stuff that only work as root and people use them."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705123357 {#5171
    date: 2024-01-13 06:22:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@aniki@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5175 …}
  +nested: Doctrine\ORM\PersistentCollection {#5177 …}
  +votes: Doctrine\ORM\PersistentCollection {#5179 …}
  +reports: Doctrine\ORM\PersistentCollection {#5181 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5183 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5185 …}
  -id: 304325
  -bodyTs: "'1':1 'load':9 'peopl':18 'root':16 'sorri':6 'stuff':11 'true':5 'use':19 'work':14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6401010"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705123357 {#5172
    date: 2024-01-13 06:22:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
59 DENIED edit 
App\Entity\EntryComment {#5173
  +user: Proxies\__CG__\App\Entity\User {#5174 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4305
    +user: App\Entity\User {#4318 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      1.) No one runs rooted docker in prod. Everything is run rootless.\n
      \n
      2.) That’s just patently not true. `docker inspect` is your friend. Also you can build your own containers trusting no-one. `FROM Scratch` [hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)\n
      \n
      3.) I think mess here is subjective. Docker folders makes way more sense than Snap mounts.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 20
    +score: 0
    +lastActive: DateTime @1722359949 {#4299
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4306 …}
    +nested: Doctrine\ORM\PersistentCollection {#4308 …}
    +votes: Doctrine\ORM\PersistentCollection {#4310 …}
    +reports: Doctrine\ORM\PersistentCollection {#4312 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4314 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4316 …}
    -id: 296471
    -bodyTs: "'/_/scratch/](https://hub.docker.com/_/scratch/)':40 '1':1 '2':13 '3':41 'also':25 'build':28 'contain':31 'docker':6,20,48 'everyth':9 'folder':49 'friend':24 'hub.docker.com':39 'hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)':38 'inspect':21 'make':50 'mess':44 'mount':56 'no-on':33 'one':3,35 'patent':17 'prod':8 'root':5 'rootless':12 'run':4,11 'scratch':37 'sens':53 'snap':55 'subject':47 'think':43 'true':19 'trust':32 'way':51"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8113673"
    +editedAt: DateTimeImmutable @1720153951 {#4300
      date: 2024-07-05 06:32:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704907664 {#4301
      date: 2024-01-10 18:27:44.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4305}
  +body: "1 is just not true sorry. There’s loads of stuff that only work as root and people use them."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705123357 {#5171
    date: 2024-01-13 06:22:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@aniki@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5175 …}
  +nested: Doctrine\ORM\PersistentCollection {#5177 …}
  +votes: Doctrine\ORM\PersistentCollection {#5179 …}
  +reports: Doctrine\ORM\PersistentCollection {#5181 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5183 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5185 …}
  -id: 304325
  -bodyTs: "'1':1 'load':9 'peopl':18 'root':16 'sorri':6 'stuff':11 'true':5 'use':19 'work':14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6401010"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705123357 {#5172
    date: 2024-01-13 06:22:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
60 DENIED moderate 
App\Entity\EntryComment {#5173
  +user: Proxies\__CG__\App\Entity\User {#5174 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4305
    +user: App\Entity\User {#4318 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      1.) No one runs rooted docker in prod. Everything is run rootless.\n
      \n
      2.) That’s just patently not true. `docker inspect` is your friend. Also you can build your own containers trusting no-one. `FROM Scratch` [hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)\n
      \n
      3.) I think mess here is subjective. Docker folders makes way more sense than Snap mounts.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 20
    +score: 0
    +lastActive: DateTime @1722359949 {#4299
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4306 …}
    +nested: Doctrine\ORM\PersistentCollection {#4308 …}
    +votes: Doctrine\ORM\PersistentCollection {#4310 …}
    +reports: Doctrine\ORM\PersistentCollection {#4312 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4314 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4316 …}
    -id: 296471
    -bodyTs: "'/_/scratch/](https://hub.docker.com/_/scratch/)':40 '1':1 '2':13 '3':41 'also':25 'build':28 'contain':31 'docker':6,20,48 'everyth':9 'folder':49 'friend':24 'hub.docker.com':39 'hub.docker.com/_/scratch/](https://hub.docker.com/_/scratch/)':38 'inspect':21 'make':50 'mess':44 'mount':56 'no-on':33 'one':3,35 'patent':17 'prod':8 'root':5 'rootless':12 'run':4,11 'scratch':37 'sens':53 'snap':55 'subject':47 'think':43 'true':19 'trust':32 'way':51"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/8113673"
    +editedAt: DateTimeImmutable @1720153951 {#4300
      date: 2024-07-05 06:32:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704907664 {#4301
      date: 2024-01-10 18:27:44.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4305}
  +body: "1 is just not true sorry. There’s loads of stuff that only work as root and people use them."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705123357 {#5171
    date: 2024-01-13 06:22:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@aniki@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5175 …}
  +nested: Doctrine\ORM\PersistentCollection {#5177 …}
  +votes: Doctrine\ORM\PersistentCollection {#5179 …}
  +reports: Doctrine\ORM\PersistentCollection {#5181 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5183 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5185 …}
  -id: 304325
  -bodyTs: "'1':1 'load':9 'peopl':18 'root':16 'sorri':6 'stuff':11 'true':5 'use':19 'work':14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6401010"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705123357 {#5172
    date: 2024-01-13 06:22:37.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
61 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
62 DENIED moderate 
App\Entity\EntryComment {#4378
  +user: App\Entity\User {#4391 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
    \n
    Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
    \n
    The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
    \n
    Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 17
  +score: 0
  +lastActive: DateTime @1721525395 {#4373
    date: 2024-07-21 03:29:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4379 …}
  +nested: Doctrine\ORM\PersistentCollection {#4381 …}
  +votes: Doctrine\ORM\PersistentCollection {#4383 …}
  +reports: Doctrine\ORM\PersistentCollection {#4385 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4387 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4389 …}
  -id: 297117
  -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6313407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919503 {#4374
    date: 2024-01-10 21:45:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
63 DENIED edit 
App\Entity\EntryComment {#4378
  +user: App\Entity\User {#4391 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
    \n
    Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
    \n
    The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
    \n
    Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 17
  +score: 0
  +lastActive: DateTime @1721525395 {#4373
    date: 2024-07-21 03:29:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4379 …}
  +nested: Doctrine\ORM\PersistentCollection {#4381 …}
  +votes: Doctrine\ORM\PersistentCollection {#4383 …}
  +reports: Doctrine\ORM\PersistentCollection {#4385 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4387 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4389 …}
  -id: 297117
  -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6313407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919503 {#4374
    date: 2024-01-10 21:45:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
64 DENIED moderate 
App\Entity\EntryComment {#4378
  +user: App\Entity\User {#4391 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
    \n
    Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
    \n
    The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
    \n
    Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 17
  +score: 0
  +lastActive: DateTime @1721525395 {#4373
    date: 2024-07-21 03:29:55.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4379 …}
  +nested: Doctrine\ORM\PersistentCollection {#4381 …}
  +votes: Doctrine\ORM\PersistentCollection {#4383 …}
  +reports: Doctrine\ORM\PersistentCollection {#4385 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4387 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4389 …}
  -id: 297117
  -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6313407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919503 {#4374
    date: 2024-01-10 21:45:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
65 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
66 DENIED moderate 
App\Entity\EntryComment {#5206
  +user: Proxies\__CG__\App\Entity\User {#5207 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4378
    +user: App\Entity\User {#4391 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
      \n
      Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
      \n
      The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
      \n
      Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 17
    +score: 0
    +lastActive: DateTime @1721525395 {#4373
      date: 2024-07-21 03:29:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4379 …}
    +nested: Doctrine\ORM\PersistentCollection {#4381 …}
    +votes: Doctrine\ORM\PersistentCollection {#4383 …}
    +reports: Doctrine\ORM\PersistentCollection {#4385 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4387 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4389 …}
    -id: 297117
    -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6313407"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919503 {#4374
      date: 2024-01-10 21:45:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4378}
  +body: "I ended up using Docker to set up pict-rs and y’all are making me happy I did"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705042613 {#5204
    date: 2024-01-12 07:56:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Hexarei@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5208 …}
  +nested: Doctrine\ORM\PersistentCollection {#5210 …}
  +votes: Doctrine\ORM\PersistentCollection {#5212 …}
  +reports: Doctrine\ORM\PersistentCollection {#5214 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5216 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5218 …}
  -id: 301260
  -bodyTs: "'docker':5 'end':2 'happi':18 'make':16 'pict':10 'pict-r':9 'rs':11 'set':7 'use':4 'y':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://cyberpaws.lol/comment/29"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705042613 {#5205
    date: 2024-01-12 07:56:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
67 DENIED edit 
App\Entity\EntryComment {#5206
  +user: Proxies\__CG__\App\Entity\User {#5207 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4378
    +user: App\Entity\User {#4391 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
      \n
      Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
      \n
      The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
      \n
      Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 17
    +score: 0
    +lastActive: DateTime @1721525395 {#4373
      date: 2024-07-21 03:29:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4379 …}
    +nested: Doctrine\ORM\PersistentCollection {#4381 …}
    +votes: Doctrine\ORM\PersistentCollection {#4383 …}
    +reports: Doctrine\ORM\PersistentCollection {#4385 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4387 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4389 …}
    -id: 297117
    -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6313407"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919503 {#4374
      date: 2024-01-10 21:45:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4378}
  +body: "I ended up using Docker to set up pict-rs and y’all are making me happy I did"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705042613 {#5204
    date: 2024-01-12 07:56:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Hexarei@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5208 …}
  +nested: Doctrine\ORM\PersistentCollection {#5210 …}
  +votes: Doctrine\ORM\PersistentCollection {#5212 …}
  +reports: Doctrine\ORM\PersistentCollection {#5214 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5216 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5218 …}
  -id: 301260
  -bodyTs: "'docker':5 'end':2 'happi':18 'make':16 'pict':10 'pict-r':9 'rs':11 'set':7 'use':4 'y':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://cyberpaws.lol/comment/29"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705042613 {#5205
    date: 2024-01-12 07:56:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
68 DENIED moderate 
App\Entity\EntryComment {#5206
  +user: Proxies\__CG__\App\Entity\User {#5207 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4378
    +user: App\Entity\User {#4391 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Others have addressed the root and trust questions, so I thought I’d mention the “mess” question:\n
      \n
      Even the messiest bowl of ravioli is easier to untangle than a bowl of spaghetti.\n
      \n
      The mounts/networks/rules and such aren’t “mess”, they are *isolation*. They’re *commoditization*. They’re *abstraction* - Ways to tell whatever is running in the container what it wants to hear, so that you can treat the container as a “black box” that solves the problem you want solved.\n
      \n
      Think of Docker containers less like pets and more like cattle, and it very quickly justifies a lot of that stuff because it makes the container disposable, even if the data it’s handling isn’t.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 17
    +score: 0
    +lastActive: DateTime @1721525395 {#4373
      date: 2024-07-21 03:29:55.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4379 …}
    +nested: Doctrine\ORM\PersistentCollection {#4381 …}
    +votes: Doctrine\ORM\PersistentCollection {#4383 …}
    +reports: Doctrine\ORM\PersistentCollection {#4385 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4387 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4389 …}
    -id: 297117
    -bodyTs: "'abstract':48 'address':3 'aren':37 'black':72 'bowl':21,30 'box':73 'cattl':91 'commodit':45 'contain':57,69,84,106 'd':13 'data':111 'dispos':107 'docker':83 'easier':25 'even':18,108 'handl':114 'hear':62 'isn':115 'isol':42 'justifi':96 'less':85 'like':86,90 'lot':98 'make':104 'mention':14 'mess':16,39 'messiest':20 'mounts/networks/rules':34 'other':1 'pet':87 'problem':77 'question':8,17 'quick':95 'ravioli':23 're':44,47 'root':5 'run':54 'solv':75,80 'spaghetti':32 'stuff':101 'tell':51 'think':81 'thought':11 'treat':67 'trust':7 'untangl':27 'want':60,79 'way':49 'whatev':52"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6313407"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919503 {#4374
      date: 2024-01-10 21:45:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4378}
  +body: "I ended up using Docker to set up pict-rs and y’all are making me happy I did"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705042613 {#5204
    date: 2024-01-12 07:56:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@Hexarei@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5208 …}
  +nested: Doctrine\ORM\PersistentCollection {#5210 …}
  +votes: Doctrine\ORM\PersistentCollection {#5212 …}
  +reports: Doctrine\ORM\PersistentCollection {#5214 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5216 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5218 …}
  -id: 301260
  -bodyTs: "'docker':5 'end':2 'happi':18 'make':16 'pict':10 'pict-r':9 'rs':11 'set':7 'use':4 'y':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://cyberpaws.lol/comment/29"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705042613 {#5205
    date: 2024-01-12 07:56:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
69 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
70 DENIED moderate 
App\Entity\EntryComment {#4453
  +user: App\Entity\User {#4466 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Docker is a messy and not ideal but it was born out of a necessity, getting multiple services to coexist together outside of a container can be a nightmare, updating and moving configuration is a nightmare and removing things can leave stuff behind which gets messier and messier over time. Docker just standardises most of the configuration whilst requiring minimal effort from the developer"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1704974625 {#4448
    date: 2024-01-11 13:03:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4454 …}
  +nested: Doctrine\ORM\PersistentCollection {#4456 …}
  +votes: Doctrine\ORM\PersistentCollection {#4458 …}
  +reports: Doctrine\ORM\PersistentCollection {#4460 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4462 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4464 …}
  -id: 298791
  -bodyTs: "'behind':43 'born':11 'coexist':20 'configur':33,57 'contain':25 'develop':64 'docker':1,51 'effort':61 'get':16,45 'ideal':7 'leav':41 'messi':4 'messier':46,48 'minim':60 'move':32 'multipl':17 'necess':15 'nightmar':29,36 'outsid':22 'remov':38 'requir':59 'servic':18 'standardis':53 'stuff':42 'thing':39 'time':50 'togeth':21 'updat':30 'whilst':58"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.uk/comment/5748497"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704974625 {#4449
    date: 2024-01-11 13:03:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
71 DENIED edit 
App\Entity\EntryComment {#4453
  +user: App\Entity\User {#4466 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Docker is a messy and not ideal but it was born out of a necessity, getting multiple services to coexist together outside of a container can be a nightmare, updating and moving configuration is a nightmare and removing things can leave stuff behind which gets messier and messier over time. Docker just standardises most of the configuration whilst requiring minimal effort from the developer"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1704974625 {#4448
    date: 2024-01-11 13:03:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4454 …}
  +nested: Doctrine\ORM\PersistentCollection {#4456 …}
  +votes: Doctrine\ORM\PersistentCollection {#4458 …}
  +reports: Doctrine\ORM\PersistentCollection {#4460 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4462 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4464 …}
  -id: 298791
  -bodyTs: "'behind':43 'born':11 'coexist':20 'configur':33,57 'contain':25 'develop':64 'docker':1,51 'effort':61 'get':16,45 'ideal':7 'leav':41 'messi':4 'messier':46,48 'minim':60 'move':32 'multipl':17 'necess':15 'nightmar':29,36 'outsid':22 'remov':38 'requir':59 'servic':18 'standardis':53 'stuff':42 'thing':39 'time':50 'togeth':21 'updat':30 'whilst':58"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.uk/comment/5748497"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704974625 {#4449
    date: 2024-01-11 13:03:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
72 DENIED moderate 
App\Entity\EntryComment {#4453
  +user: App\Entity\User {#4466 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Docker is a messy and not ideal but it was born out of a necessity, getting multiple services to coexist together outside of a container can be a nightmare, updating and moving configuration is a nightmare and removing things can leave stuff behind which gets messier and messier over time. Docker just standardises most of the configuration whilst requiring minimal effort from the developer"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1704974625 {#4448
    date: 2024-01-11 13:03:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4454 …}
  +nested: Doctrine\ORM\PersistentCollection {#4456 …}
  +votes: Doctrine\ORM\PersistentCollection {#4458 …}
  +reports: Doctrine\ORM\PersistentCollection {#4460 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4462 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4464 …}
  -id: 298791
  -bodyTs: "'behind':43 'born':11 'coexist':20 'configur':33,57 'contain':25 'develop':64 'docker':1,51 'effort':61 'get':16,45 'ideal':7 'leav':41 'messi':4 'messier':46,48 'minim':60 'move':32 'multipl':17 'necess':15 'nightmar':29,36 'outsid':22 'remov':38 'requir':59 'servic':18 'standardis':53 'stuff':42 'thing':39 'time':50 'togeth':21 'updat':30 'whilst':58"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.uk/comment/5748497"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704974625 {#4449
    date: 2024-01-11 13:03:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
73 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
74 DENIED moderate 
App\Entity\EntryComment {#4527
  +user: App\Entity\User {#4540 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
    \n
    As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1720396394 {#4522
    date: 2024-07-08 01:53:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4528 …}
  +nested: Doctrine\ORM\PersistentCollection {#4530 …}
  +votes: Doctrine\ORM\PersistentCollection {#4532 …}
  +reports: Doctrine\ORM\PersistentCollection {#4534 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
  -id: 296428
  -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7351713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906698 {#4523
    date: 2024-01-10 18:11:38.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
75 DENIED edit 
App\Entity\EntryComment {#4527
  +user: App\Entity\User {#4540 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
    \n
    As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1720396394 {#4522
    date: 2024-07-08 01:53:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4528 …}
  +nested: Doctrine\ORM\PersistentCollection {#4530 …}
  +votes: Doctrine\ORM\PersistentCollection {#4532 …}
  +reports: Doctrine\ORM\PersistentCollection {#4534 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
  -id: 296428
  -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7351713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906698 {#4523
    date: 2024-01-10 18:11:38.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
76 DENIED moderate 
App\Entity\EntryComment {#4527
  +user: App\Entity\User {#4540 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
    \n
    As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 16
  +score: 0
  +lastActive: DateTime @1720396394 {#4522
    date: 2024-07-08 01:53:14.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4528 …}
  +nested: Doctrine\ORM\PersistentCollection {#4530 …}
  +votes: Doctrine\ORM\PersistentCollection {#4532 …}
  +reports: Doctrine\ORM\PersistentCollection {#4534 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
  -id: 296428
  -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/7351713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704906698 {#4523
    date: 2024-01-10 18:11:38.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
77 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
78 DENIED moderate 
App\Entity\EntryComment {#5123
  +user: Proxies\__CG__\App\Entity\User {#5120 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4527
    +user: App\Entity\User {#4540 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
      \n
      As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 16
    +score: 0
    +lastActive: DateTime @1720396394 {#4522
      date: 2024-07-08 01:53:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4528 …}
    +nested: Doctrine\ORM\PersistentCollection {#4530 …}
    +votes: Doctrine\ORM\PersistentCollection {#4532 …}
    +reports: Doctrine\ORM\PersistentCollection {#4534 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
    -id: 296428
    -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7351713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906698 {#4523
      date: 2024-01-10 18:11:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4527}
  +body: """
    > I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
    \n
    Same here. I self-host a bunch of dev tools for my personal toy projects, and I decided to migrate from Drone CI to Woodpecker CI this week. Didn’t have to worry about uninstalling anything, learning what commands I need to start/stop/restart Woodpecker properly, etc. I just commented-out my Drone CI/Runner services from my docker-compose file, added the Woodpecker stuff, pointed it to my Gitea variables and ran `docker compose up -d`.\n
    \n
    If my server ever crashes, I can just copy it over and start from scratch.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704912379 {#5127
    date: 2024-01-10 19:46:19.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5119 …}
  +nested: Doctrine\ORM\PersistentCollection {#5117 …}
  +votes: Doctrine\ORM\PersistentCollection {#5132 …}
  +reports: Doctrine\ORM\PersistentCollection {#5134 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5136 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5138 …}
  -id: 296686
  -bodyTs: "'ad':85 'anyth':59 'bunch':30 'ci':46,49 'ci/runner':77 'command':62 'comment':73 'commented-out':72 'compos':83,98 'copi':109 'crash':105 'd':100 'decid':41 'dev':32 'didn':52 'docker':82,97 'docker-compos':81 'drone':45,76 'easier':7 'easili':22 'environ':17 'etc':69 'ever':104 'file':84 'find':2 'gitea':93 'host':28 'learn':60 'life':6 'm':19 'make':4 'migrat':43 'need':64 'person':8,36 'play':20 'point':89 'project':38 'proper':68 'ran':96 'scratch':115 'self':27 'self-host':26 'server':103 'servic':78 'set':12 'start':113 'start/stop/restart':66 'stuff':88 'tear':15 'tool':33 'toy':37 'uninstal':58 'variabl':94 'week':51 'woodpeck':48,67,87 'worri':56"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6559301"
  +editedAt: DateTimeImmutable @1720238915 {#5130
    date: 2024-07-06 06:08:35.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704912379 {#5126
    date: 2024-01-10 19:46:19.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
79 DENIED edit 
App\Entity\EntryComment {#5123
  +user: Proxies\__CG__\App\Entity\User {#5120 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4527
    +user: App\Entity\User {#4540 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
      \n
      As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 16
    +score: 0
    +lastActive: DateTime @1720396394 {#4522
      date: 2024-07-08 01:53:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4528 …}
    +nested: Doctrine\ORM\PersistentCollection {#4530 …}
    +votes: Doctrine\ORM\PersistentCollection {#4532 …}
    +reports: Doctrine\ORM\PersistentCollection {#4534 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
    -id: 296428
    -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7351713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906698 {#4523
      date: 2024-01-10 18:11:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4527}
  +body: """
    > I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
    \n
    Same here. I self-host a bunch of dev tools for my personal toy projects, and I decided to migrate from Drone CI to Woodpecker CI this week. Didn’t have to worry about uninstalling anything, learning what commands I need to start/stop/restart Woodpecker properly, etc. I just commented-out my Drone CI/Runner services from my docker-compose file, added the Woodpecker stuff, pointed it to my Gitea variables and ran `docker compose up -d`.\n
    \n
    If my server ever crashes, I can just copy it over and start from scratch.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704912379 {#5127
    date: 2024-01-10 19:46:19.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5119 …}
  +nested: Doctrine\ORM\PersistentCollection {#5117 …}
  +votes: Doctrine\ORM\PersistentCollection {#5132 …}
  +reports: Doctrine\ORM\PersistentCollection {#5134 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5136 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5138 …}
  -id: 296686
  -bodyTs: "'ad':85 'anyth':59 'bunch':30 'ci':46,49 'ci/runner':77 'command':62 'comment':73 'commented-out':72 'compos':83,98 'copi':109 'crash':105 'd':100 'decid':41 'dev':32 'didn':52 'docker':82,97 'docker-compos':81 'drone':45,76 'easier':7 'easili':22 'environ':17 'etc':69 'ever':104 'file':84 'find':2 'gitea':93 'host':28 'learn':60 'life':6 'm':19 'make':4 'migrat':43 'need':64 'person':8,36 'play':20 'point':89 'project':38 'proper':68 'ran':96 'scratch':115 'self':27 'self-host':26 'server':103 'servic':78 'set':12 'start':113 'start/stop/restart':66 'stuff':88 'tear':15 'tool':33 'toy':37 'uninstal':58 'variabl':94 'week':51 'woodpeck':48,67,87 'worri':56"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6559301"
  +editedAt: DateTimeImmutable @1720238915 {#5130
    date: 2024-07-06 06:08:35.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704912379 {#5126
    date: 2024-01-10 19:46:19.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
80 DENIED moderate 
App\Entity\EntryComment {#5123
  +user: Proxies\__CG__\App\Entity\User {#5120 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4527
    +user: App\Entity\User {#4540 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
      \n
      As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 16
    +score: 0
    +lastActive: DateTime @1720396394 {#4522
      date: 2024-07-08 01:53:14.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4528 …}
    +nested: Doctrine\ORM\PersistentCollection {#4530 …}
    +votes: Doctrine\ORM\PersistentCollection {#4532 …}
    +reports: Doctrine\ORM\PersistentCollection {#4534 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
    -id: 296428
    -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/7351713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906698 {#4523
      date: 2024-01-10 18:11:38.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4527}
  +body: """
    > I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
    \n
    Same here. I self-host a bunch of dev tools for my personal toy projects, and I decided to migrate from Drone CI to Woodpecker CI this week. Didn’t have to worry about uninstalling anything, learning what commands I need to start/stop/restart Woodpecker properly, etc. I just commented-out my Drone CI/Runner services from my docker-compose file, added the Woodpecker stuff, pointed it to my Gitea variables and ran `docker compose up -d`.\n
    \n
    If my server ever crashes, I can just copy it over and start from scratch.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704912379 {#5127
    date: 2024-01-10 19:46:19.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5119 …}
  +nested: Doctrine\ORM\PersistentCollection {#5117 …}
  +votes: Doctrine\ORM\PersistentCollection {#5132 …}
  +reports: Doctrine\ORM\PersistentCollection {#5134 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5136 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5138 …}
  -id: 296686
  -bodyTs: "'ad':85 'anyth':59 'bunch':30 'ci':46,49 'ci/runner':77 'command':62 'comment':73 'commented-out':72 'compos':83,98 'copi':109 'crash':105 'd':100 'decid':41 'dev':32 'didn':52 'docker':82,97 'docker-compos':81 'drone':45,76 'easier':7 'easili':22 'environ':17 'etc':69 'ever':104 'file':84 'find':2 'gitea':93 'host':28 'learn':60 'life':6 'm':19 'make':4 'migrat':43 'need':64 'person':8,36 'play':20 'point':89 'project':38 'proper':68 'ran':96 'scratch':115 'self':27 'self-host':26 'server':103 'servic':78 'set':12 'start':113 'start/stop/restart':66 'stuff':88 'tear':15 'tool':33 'toy':37 'uninstal':58 'variabl':94 'week':51 'woodpeck':48,67,87 'worri':56"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6559301"
  +editedAt: DateTimeImmutable @1720238915 {#5130
    date: 2024-07-06 06:08:35.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704912379 {#5126
    date: 2024-01-10 19:46:19.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
81 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
82 DENIED moderate 
App\Entity\EntryComment {#5314
  +user: App\Entity\User {#4318 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5123
    +user: Proxies\__CG__\App\Entity\User {#5120 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4527
      +user: App\Entity\User {#4540 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
        \n
        As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 16
      +score: 0
      +lastActive: DateTime @1720396394 {#4522
        date: 2024-07-08 01:53:14.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4528 …}
      +nested: Doctrine\ORM\PersistentCollection {#4530 …}
      +votes: Doctrine\ORM\PersistentCollection {#4532 …}
      +reports: Doctrine\ORM\PersistentCollection {#4534 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
      -id: 296428
      -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/7351713"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704906698 {#4523
        date: 2024-01-10 18:11:38.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4527}
    +body: """
      > I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
      \n
      Same here. I self-host a bunch of dev tools for my personal toy projects, and I decided to migrate from Drone CI to Woodpecker CI this week. Didn’t have to worry about uninstalling anything, learning what commands I need to start/stop/restart Woodpecker properly, etc. I just commented-out my Drone CI/Runner services from my docker-compose file, added the Woodpecker stuff, pointed it to my Gitea variables and ran `docker compose up -d`.\n
      \n
      If my server ever crashes, I can just copy it over and start from scratch.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704912379 {#5127
      date: 2024-01-10 19:46:19.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@MartianSands@sh.itjust.works"
      "@Shimitar@feddit.it"
      "@MartianSands@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5119 …}
    +nested: Doctrine\ORM\PersistentCollection {#5117 …}
    +votes: Doctrine\ORM\PersistentCollection {#5132 …}
    +reports: Doctrine\ORM\PersistentCollection {#5134 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5138 …}
    -id: 296686
    -bodyTs: "'ad':85 'anyth':59 'bunch':30 'ci':46,49 'ci/runner':77 'command':62 'comment':73 'commented-out':72 'compos':83,98 'copi':109 'crash':105 'd':100 'decid':41 'dev':32 'didn':52 'docker':82,97 'docker-compos':81 'drone':45,76 'easier':7 'easili':22 'environ':17 'etc':69 'ever':104 'file':84 'find':2 'gitea':93 'host':28 'learn':60 'life':6 'm':19 'make':4 'migrat':43 'need':64 'person':8,36 'play':20 'point':89 'project':38 'proper':68 'ran':96 'scratch':115 'self':27 'self-host':26 'server':103 'servic':78 'set':12 'start':113 'start/stop/restart':66 'stuff':88 'tear':15 'tool':33 'toy':37 'uninstal':58 'variabl':94 'week':51 'woodpeck':48,67,87 'worri':56"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6559301"
    +editedAt: DateTimeImmutable @1720238915 {#5130
      date: 2024-07-06 06:08:35.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704912379 {#5126
      date: 2024-01-10 19:46:19.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4527}
  +body: "I really need to get into Woodpecker."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704926320 {#5315
    date: 2024-01-10 23:38:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
    "@micka190@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5307 …}
  +nested: Doctrine\ORM\PersistentCollection {#5305 …}
  +votes: Doctrine\ORM\PersistentCollection {#5303 …}
  +reports: Doctrine\ORM\PersistentCollection {#5316 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5318 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5320 …}
  -id: 297533
  -bodyTs: "'get':5 'need':3 'realli':2 'woodpeck':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8121522"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704926320 {#5312
    date: 2024-01-10 23:38:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
83 DENIED edit 
App\Entity\EntryComment {#5314
  +user: App\Entity\User {#4318 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5123
    +user: Proxies\__CG__\App\Entity\User {#5120 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4527
      +user: App\Entity\User {#4540 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
        \n
        As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 16
      +score: 0
      +lastActive: DateTime @1720396394 {#4522
        date: 2024-07-08 01:53:14.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4528 …}
      +nested: Doctrine\ORM\PersistentCollection {#4530 …}
      +votes: Doctrine\ORM\PersistentCollection {#4532 …}
      +reports: Doctrine\ORM\PersistentCollection {#4534 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
      -id: 296428
      -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/7351713"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704906698 {#4523
        date: 2024-01-10 18:11:38.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4527}
    +body: """
      > I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
      \n
      Same here. I self-host a bunch of dev tools for my personal toy projects, and I decided to migrate from Drone CI to Woodpecker CI this week. Didn’t have to worry about uninstalling anything, learning what commands I need to start/stop/restart Woodpecker properly, etc. I just commented-out my Drone CI/Runner services from my docker-compose file, added the Woodpecker stuff, pointed it to my Gitea variables and ran `docker compose up -d`.\n
      \n
      If my server ever crashes, I can just copy it over and start from scratch.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704912379 {#5127
      date: 2024-01-10 19:46:19.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@MartianSands@sh.itjust.works"
      "@Shimitar@feddit.it"
      "@MartianSands@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5119 …}
    +nested: Doctrine\ORM\PersistentCollection {#5117 …}
    +votes: Doctrine\ORM\PersistentCollection {#5132 …}
    +reports: Doctrine\ORM\PersistentCollection {#5134 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5138 …}
    -id: 296686
    -bodyTs: "'ad':85 'anyth':59 'bunch':30 'ci':46,49 'ci/runner':77 'command':62 'comment':73 'commented-out':72 'compos':83,98 'copi':109 'crash':105 'd':100 'decid':41 'dev':32 'didn':52 'docker':82,97 'docker-compos':81 'drone':45,76 'easier':7 'easili':22 'environ':17 'etc':69 'ever':104 'file':84 'find':2 'gitea':93 'host':28 'learn':60 'life':6 'm':19 'make':4 'migrat':43 'need':64 'person':8,36 'play':20 'point':89 'project':38 'proper':68 'ran':96 'scratch':115 'self':27 'self-host':26 'server':103 'servic':78 'set':12 'start':113 'start/stop/restart':66 'stuff':88 'tear':15 'tool':33 'toy':37 'uninstal':58 'variabl':94 'week':51 'woodpeck':48,67,87 'worri':56"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6559301"
    +editedAt: DateTimeImmutable @1720238915 {#5130
      date: 2024-07-06 06:08:35.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704912379 {#5126
      date: 2024-01-10 19:46:19.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4527}
  +body: "I really need to get into Woodpecker."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704926320 {#5315
    date: 2024-01-10 23:38:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
    "@micka190@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5307 …}
  +nested: Doctrine\ORM\PersistentCollection {#5305 …}
  +votes: Doctrine\ORM\PersistentCollection {#5303 …}
  +reports: Doctrine\ORM\PersistentCollection {#5316 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5318 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5320 …}
  -id: 297533
  -bodyTs: "'get':5 'need':3 'realli':2 'woodpeck':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8121522"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704926320 {#5312
    date: 2024-01-10 23:38:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
84 DENIED moderate 
App\Entity\EntryComment {#5314
  +user: App\Entity\User {#4318 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5123
    +user: Proxies\__CG__\App\Entity\User {#5120 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4527
      +user: App\Entity\User {#4540 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
        \n
        As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 16
      +score: 0
      +lastActive: DateTime @1720396394 {#4522
        date: 2024-07-08 01:53:14.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4528 …}
      +nested: Doctrine\ORM\PersistentCollection {#4530 …}
      +votes: Doctrine\ORM\PersistentCollection {#4532 …}
      +reports: Doctrine\ORM\PersistentCollection {#4534 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4536 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4538 …}
      -id: 296428
      -bodyTs: "'awar':31 'begin':63 'concern':28 'configur':38 'contain':44 'day':35 'differ':47 'docker':33 'doesn':57 'easier':7 'easili':22 'environ':17 'find':2 'life':6 'm':19 'make':4 'map':40 'permiss':27 'person':8,49 'play':20 'podman':54 'prefer':51 'problem':61 'root':41 'set':12 'tear':15 'though':55 'use':53 'user':26,48"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/7351713"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704906698 {#4523
        date: 2024-01-10 18:11:38.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4527}
    +body: """
      > I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.\n
      \n
      Same here. I self-host a bunch of dev tools for my personal toy projects, and I decided to migrate from Drone CI to Woodpecker CI this week. Didn’t have to worry about uninstalling anything, learning what commands I need to start/stop/restart Woodpecker properly, etc. I just commented-out my Drone CI/Runner services from my docker-compose file, added the Woodpecker stuff, pointed it to my Gitea variables and ran `docker compose up -d`.\n
      \n
      If my server ever crashes, I can just copy it over and start from scratch.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704912379 {#5127
      date: 2024-01-10 19:46:19.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@MartianSands@sh.itjust.works"
      "@Shimitar@feddit.it"
      "@MartianSands@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5119 …}
    +nested: Doctrine\ORM\PersistentCollection {#5117 …}
    +votes: Doctrine\ORM\PersistentCollection {#5132 …}
    +reports: Doctrine\ORM\PersistentCollection {#5134 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5136 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5138 …}
    -id: 296686
    -bodyTs: "'ad':85 'anyth':59 'bunch':30 'ci':46,49 'ci/runner':77 'command':62 'comment':73 'commented-out':72 'compos':83,98 'copi':109 'crash':105 'd':100 'decid':41 'dev':32 'didn':52 'docker':82,97 'docker-compos':81 'drone':45,76 'easier':7 'easili':22 'environ':17 'etc':69 'ever':104 'file':84 'find':2 'gitea':93 'host':28 'learn':60 'life':6 'm':19 'make':4 'migrat':43 'need':64 'person':8,36 'play':20 'point':89 'project':38 'proper':68 'ran':96 'scratch':115 'self':27 'self-host':26 'server':103 'servic':78 'set':12 'start':113 'start/stop/restart':66 'stuff':88 'tear':15 'tool':33 'toy':37 'uninstal':58 'variabl':94 'week':51 'woodpeck':48,67,87 'worri':56"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6559301"
    +editedAt: DateTimeImmutable @1720238915 {#5130
      date: 2024-07-06 06:08:35.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704912379 {#5126
      date: 2024-01-10 19:46:19.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4527}
  +body: "I really need to get into Woodpecker."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704926320 {#5315
    date: 2024-01-10 23:38:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@MartianSands@sh.itjust.works"
    "@micka190@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5307 …}
  +nested: Doctrine\ORM\PersistentCollection {#5305 …}
  +votes: Doctrine\ORM\PersistentCollection {#5303 …}
  +reports: Doctrine\ORM\PersistentCollection {#5316 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5318 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5320 …}
  -id: 297533
  -bodyTs: "'get':5 'need':3 'realli':2 'woodpeck':7"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8121522"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704926320 {#5312
    date: 2024-01-10 23:38:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
85 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
86 DENIED moderate 
App\Entity\EntryComment {#4600
  +user: App\Entity\User {#4613 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Because if you use relative bind mounts you can move a whole docker compose set of contaibera to a new host with docker compose stop then rsync it over then docker compose up -d.\n
    \n
    Portability and backup are dead simple.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704959042 {#4595
    date: 2024-01-11 08:44:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4601 …}
  +nested: Doctrine\ORM\PersistentCollection {#4603 …}
  +votes: Doctrine\ORM\PersistentCollection {#4605 …}
  +reports: Doctrine\ORM\PersistentCollection {#4607 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4609 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4611 …}
  -id: 298495
  -bodyTs: "'backup':37 'bind':6 'compos':14,24,32 'contaibera':17 'd':34 'dead':39 'docker':13,23,31 'host':21 'mount':7 'move':10 'new':20 'portabl':35 'relat':5 'rsync':27 'set':15 'simpl':40 'stop':25 'use':4 'whole':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6573306"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959042 {#4596
    date: 2024-01-11 08:44:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
87 DENIED edit 
App\Entity\EntryComment {#4600
  +user: App\Entity\User {#4613 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Because if you use relative bind mounts you can move a whole docker compose set of contaibera to a new host with docker compose stop then rsync it over then docker compose up -d.\n
    \n
    Portability and backup are dead simple.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704959042 {#4595
    date: 2024-01-11 08:44:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4601 …}
  +nested: Doctrine\ORM\PersistentCollection {#4603 …}
  +votes: Doctrine\ORM\PersistentCollection {#4605 …}
  +reports: Doctrine\ORM\PersistentCollection {#4607 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4609 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4611 …}
  -id: 298495
  -bodyTs: "'backup':37 'bind':6 'compos':14,24,32 'contaibera':17 'd':34 'dead':39 'docker':13,23,31 'host':21 'mount':7 'move':10 'new':20 'portabl':35 'relat':5 'rsync':27 'set':15 'simpl':40 'stop':25 'use':4 'whole':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6573306"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959042 {#4596
    date: 2024-01-11 08:44:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
88 DENIED moderate 
App\Entity\EntryComment {#4600
  +user: App\Entity\User {#4613 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Because if you use relative bind mounts you can move a whole docker compose set of contaibera to a new host with docker compose stop then rsync it over then docker compose up -d.\n
    \n
    Portability and backup are dead simple.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1704959042 {#4595
    date: 2024-01-11 08:44:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4601 …}
  +nested: Doctrine\ORM\PersistentCollection {#4603 …}
  +votes: Doctrine\ORM\PersistentCollection {#4605 …}
  +reports: Doctrine\ORM\PersistentCollection {#4607 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4609 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4611 …}
  -id: 298495
  -bodyTs: "'backup':37 'bind':6 'compos':14,24,32 'contaibera':17 'd':34 'dead':39 'docker':13,23,31 'host':21 'mount':7 'move':10 'new':20 'portabl':35 'relat':5 'rsync':27 'set':15 'simpl':40 'stop':25 'use':4 'whole':12"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6573306"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704959042 {#4596
    date: 2024-01-11 08:44:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
89 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
90 DENIED moderate 
App\Entity\EntryComment {#4673
  +user: App\Entity\User {#4686 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Well docker tends to be more secure if you configure it right. As far as images go it really is just a matter of getting your images from official sources. If there isn’t a image already available you can make one.\n
    \n
    The big advantage to containers is that they are highly reproducible. You no longer need to worry about issues that arise when running on the host directly.\n
    \n
    Also if you are looking for a container runtime that runs as a local user you should check out podman. Podman works very similarly to docker and can even run your containers as a systemd user service.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1704930880 {#4668
    date: 2024-01-11 00:54:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4674 …}
  +nested: Doctrine\ORM\PersistentCollection {#4676 …}
  +votes: Doctrine\ORM\PersistentCollection {#4678 …}
  +reports: Doctrine\ORM\PersistentCollection {#4680 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4682 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4684 …}
  -id: 297761
  -bodyTs: "'advantag':45 'alreadi':37 'also':70 'aris':63 'avail':38 'big':44 'check':87 'configur':10 'contain':47,77,101 'direct':69 'docker':2,95 'even':98 'far':14 'get':25 'go':17 'high':52 'host':68 'imag':16,27,36 'isn':33 'issu':61 'local':83 'longer':56 'look':74 'make':41 'matter':23 'need':57 'offici':29 'one':42 'podman':89,90 'realli':19 'reproduc':53 'right':12 'run':65,80,99 'runtim':78 'secur':7 'servic':106 'similar':93 'sourc':30 'systemd':104 'tend':3 'user':84,105 'well':1 'work':91 'worri':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/6163657"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704930880 {#4669
    date: 2024-01-11 00:54:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
91 DENIED edit 
App\Entity\EntryComment {#4673
  +user: App\Entity\User {#4686 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Well docker tends to be more secure if you configure it right. As far as images go it really is just a matter of getting your images from official sources. If there isn’t a image already available you can make one.\n
    \n
    The big advantage to containers is that they are highly reproducible. You no longer need to worry about issues that arise when running on the host directly.\n
    \n
    Also if you are looking for a container runtime that runs as a local user you should check out podman. Podman works very similarly to docker and can even run your containers as a systemd user service.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1704930880 {#4668
    date: 2024-01-11 00:54:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4674 …}
  +nested: Doctrine\ORM\PersistentCollection {#4676 …}
  +votes: Doctrine\ORM\PersistentCollection {#4678 …}
  +reports: Doctrine\ORM\PersistentCollection {#4680 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4682 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4684 …}
  -id: 297761
  -bodyTs: "'advantag':45 'alreadi':37 'also':70 'aris':63 'avail':38 'big':44 'check':87 'configur':10 'contain':47,77,101 'direct':69 'docker':2,95 'even':98 'far':14 'get':25 'go':17 'high':52 'host':68 'imag':16,27,36 'isn':33 'issu':61 'local':83 'longer':56 'look':74 'make':41 'matter':23 'need':57 'offici':29 'one':42 'podman':89,90 'realli':19 'reproduc':53 'right':12 'run':65,80,99 'runtim':78 'secur':7 'servic':106 'similar':93 'sourc':30 'systemd':104 'tend':3 'user':84,105 'well':1 'work':91 'worri':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/6163657"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704930880 {#4669
    date: 2024-01-11 00:54:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
92 DENIED moderate 
App\Entity\EntryComment {#4673
  +user: App\Entity\User {#4686 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Well docker tends to be more secure if you configure it right. As far as images go it really is just a matter of getting your images from official sources. If there isn’t a image already available you can make one.\n
    \n
    The big advantage to containers is that they are highly reproducible. You no longer need to worry about issues that arise when running on the host directly.\n
    \n
    Also if you are looking for a container runtime that runs as a local user you should check out podman. Podman works very similarly to docker and can even run your containers as a systemd user service.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1704930880 {#4668
    date: 2024-01-11 00:54:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4674 …}
  +nested: Doctrine\ORM\PersistentCollection {#4676 …}
  +votes: Doctrine\ORM\PersistentCollection {#4678 …}
  +reports: Doctrine\ORM\PersistentCollection {#4680 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4682 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4684 …}
  -id: 297761
  -bodyTs: "'advantag':45 'alreadi':37 'also':70 'aris':63 'avail':38 'big':44 'check':87 'configur':10 'contain':47,77,101 'direct':69 'docker':2,95 'even':98 'far':14 'get':25 'go':17 'high':52 'host':68 'imag':16,27,36 'isn':33 'issu':61 'local':83 'longer':56 'look':74 'make':41 'matter':23 'need':57 'offici':29 'one':42 'podman':89,90 'realli':19 'reproduc':53 'right':12 'run':65,80,99 'runtim':78 'secur':7 'servic':106 'similar':93 'sourc':30 'systemd':104 'tend':3 'user':84,105 'well':1 'work':91 'worri':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.zip/comment/6163657"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704930880 {#4669
    date: 2024-01-11 00:54:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
93 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
94 DENIED moderate 
App\Entity\EntryComment {#4746
  +user: App\Entity\User {#4759 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    To answer each question:\n
    \n
    - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
    - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
    \n
    I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
    \n
    It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
    \n
    Why? I like to play.\n
    \n
    Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
    \n
    Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
    \n
    Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
    \n
    I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
    \n
    I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720429542 {#4741
    date: 2024-07-08 11:05:42.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4747 …}
  +nested: Doctrine\ORM\PersistentCollection {#4749 …}
  +votes: Doctrine\ORM\PersistentCollection {#4751 …}
  +reports: Doctrine\ORM\PersistentCollection {#4753 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
  -id: 297069
  -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851237"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919019 {#4742
    date: 2024-01-10 21:36:59.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
95 DENIED edit 
App\Entity\EntryComment {#4746
  +user: App\Entity\User {#4759 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    To answer each question:\n
    \n
    - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
    - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
    \n
    I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
    \n
    It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
    \n
    Why? I like to play.\n
    \n
    Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
    \n
    Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
    \n
    Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
    \n
    I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
    \n
    I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720429542 {#4741
    date: 2024-07-08 11:05:42.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4747 …}
  +nested: Doctrine\ORM\PersistentCollection {#4749 …}
  +votes: Doctrine\ORM\PersistentCollection {#4751 …}
  +reports: Doctrine\ORM\PersistentCollection {#4753 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
  -id: 297069
  -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851237"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919019 {#4742
    date: 2024-01-10 21:36:59.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
96 DENIED moderate 
App\Entity\EntryComment {#4746
  +user: App\Entity\User {#4759 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    To answer each question:\n
    \n
    - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
    - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
    \n
    I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
    \n
    It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
    \n
    Why? I like to play.\n
    \n
    Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
    \n
    Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
    \n
    Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
    \n
    I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
    \n
    I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720429542 {#4741
    date: 2024-07-08 11:05:42.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4747 …}
  +nested: Doctrine\ORM\PersistentCollection {#4749 …}
  +votes: Doctrine\ORM\PersistentCollection {#4751 …}
  +reports: Doctrine\ORM\PersistentCollection {#4753 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
  -id: 297069
  -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851237"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704919019 {#4742
    date: 2024-01-10 21:36:59.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
97 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
98 DENIED moderate 
App\Entity\EntryComment {#5190
  +user: Proxies\__CG__\App\Entity\User {#5191 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4746
    +user: App\Entity\User {#4759 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      To answer each question:\n
      \n
      - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
      - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
      \n
      I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
      \n
      It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
      \n
      Why? I like to play.\n
      \n
      Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
      \n
      Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
      \n
      Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
      \n
      I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
      \n
      I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720429542 {#4741
      date: 2024-07-08 11:05:42.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4747 …}
    +nested: Doctrine\ORM\PersistentCollection {#4749 …}
    +votes: Doctrine\ORM\PersistentCollection {#4751 …}
    +reports: Doctrine\ORM\PersistentCollection {#4753 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
    -id: 297069
    -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://reddrefuge.com/comment/851237"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919019 {#4742
      date: 2024-01-10 21:36:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4746}
  +body: """
    > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    \n
    There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704928558 {#5187
    date: 2024-01-11 00:15:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5192 …}
  +nested: Doctrine\ORM\PersistentCollection {#5194 …}
  +votes: Doctrine\ORM\PersistentCollection {#5196 …}
  +reports: Doctrine\ORM\PersistentCollection {#5198 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5200 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5202 …}
  -id: 297651
  -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923527"
  +editedAt: DateTimeImmutable @1720418191 {#5188
    date: 2024-07-08 07:56:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704928558 {#5189
    date: 2024-01-11 00:15:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
99 DENIED edit 
App\Entity\EntryComment {#5190
  +user: Proxies\__CG__\App\Entity\User {#5191 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4746
    +user: App\Entity\User {#4759 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      To answer each question:\n
      \n
      - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
      - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
      \n
      I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
      \n
      It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
      \n
      Why? I like to play.\n
      \n
      Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
      \n
      Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
      \n
      Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
      \n
      I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
      \n
      I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720429542 {#4741
      date: 2024-07-08 11:05:42.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4747 …}
    +nested: Doctrine\ORM\PersistentCollection {#4749 …}
    +votes: Doctrine\ORM\PersistentCollection {#4751 …}
    +reports: Doctrine\ORM\PersistentCollection {#4753 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
    -id: 297069
    -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://reddrefuge.com/comment/851237"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919019 {#4742
      date: 2024-01-10 21:36:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4746}
  +body: """
    > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    \n
    There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704928558 {#5187
    date: 2024-01-11 00:15:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5192 …}
  +nested: Doctrine\ORM\PersistentCollection {#5194 …}
  +votes: Doctrine\ORM\PersistentCollection {#5196 …}
  +reports: Doctrine\ORM\PersistentCollection {#5198 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5200 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5202 …}
  -id: 297651
  -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923527"
  +editedAt: DateTimeImmutable @1720418191 {#5188
    date: 2024-07-08 07:56:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704928558 {#5189
    date: 2024-01-11 00:15:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
100 DENIED moderate 
App\Entity\EntryComment {#5190
  +user: Proxies\__CG__\App\Entity\User {#5191 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4746
    +user: App\Entity\User {#4759 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      To answer each question:\n
      \n
      - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
      - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
      \n
      I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
      \n
      It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
      \n
      Why? I like to play.\n
      \n
      Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
      \n
      Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
      \n
      Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
      \n
      I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
      \n
      I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720429542 {#4741
      date: 2024-07-08 11:05:42.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4747 …}
    +nested: Doctrine\ORM\PersistentCollection {#4749 …}
    +votes: Doctrine\ORM\PersistentCollection {#4751 …}
    +reports: Doctrine\ORM\PersistentCollection {#4753 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
    -id: 297069
    -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://reddrefuge.com/comment/851237"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704919019 {#4742
      date: 2024-01-10 21:36:59.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4746}
  +body: """
    > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
    \n
    There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704928558 {#5187
    date: 2024-01-11 00:15:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5192 …}
  +nested: Doctrine\ORM\PersistentCollection {#5194 …}
  +votes: Doctrine\ORM\PersistentCollection {#5196 …}
  +reports: Doctrine\ORM\PersistentCollection {#5198 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5200 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5202 …}
  -id: 297651
  -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923527"
  +editedAt: DateTimeImmutable @1720418191 {#5188
    date: 2024-07-08 07:56:31.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704928558 {#5189
    date: 2024-01-11 00:15:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
101 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
102 DENIED moderate 
App\Entity\EntryComment {#5339
  +user: App\Entity\User {#4759 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5190
    +user: Proxies\__CG__\App\Entity\User {#5191 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: App\Entity\User {#4759 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        To answer each question:\n
        \n
        - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
        - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
        - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
        \n
        I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
        \n
        It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
        \n
        Why? I like to play.\n
        \n
        Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
        \n
        Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
        \n
        Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
        \n
        I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
        \n
        I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720429542 {#4741
        date: 2024-07-08 11:05:42.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4747 …}
      +nested: Doctrine\ORM\PersistentCollection {#4749 …}
      +votes: Doctrine\ORM\PersistentCollection {#4751 …}
      +reports: Doctrine\ORM\PersistentCollection {#4753 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
      -id: 297069
      -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://reddrefuge.com/comment/851237"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704919019 {#4742
        date: 2024-01-10 21:36:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4746}
    +body: """
      > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      \n
      There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704928558 {#5187
      date: 2024-01-11 00:15:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5192 …}
    +nested: Doctrine\ORM\PersistentCollection {#5194 …}
    +votes: Doctrine\ORM\PersistentCollection {#5196 …}
    +reports: Doctrine\ORM\PersistentCollection {#5198 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5200 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5202 …}
    -id: 297651
    -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/5923527"
    +editedAt: DateTimeImmutable @1720418191 {#5188
      date: 2024-07-08 07:56:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704928558 {#5189
      date: 2024-01-11 00:15:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4746}
  +body: "Yep, all true. I was oversimplifying in my explanation, but you’re right. There’s a lot more to it than what I wrote - I was more relating docker to what we used to do with chroot jails."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704929831 {#5337
    date: 2024-01-11 00:37:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5340 …}
  +nested: Doctrine\ORM\PersistentCollection {#5342 …}
  +votes: Doctrine\ORM\PersistentCollection {#5344 …}
  +reports: Doctrine\ORM\PersistentCollection {#5346 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5348 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5350 …}
  -id: 297707
  -bodyTs: "'chroot':37 'docker':29 'explan':9 'jail':38 'lot':17 'oversimplifi':6 're':12 'relat':28 'right':13 'true':3 'use':33 'wrote':24 'yep':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851584"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704929831 {#5338
    date: 2024-01-11 00:37:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
103 DENIED edit 
App\Entity\EntryComment {#5339
  +user: App\Entity\User {#4759 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5190
    +user: Proxies\__CG__\App\Entity\User {#5191 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: App\Entity\User {#4759 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        To answer each question:\n
        \n
        - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
        - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
        - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
        \n
        I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
        \n
        It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
        \n
        Why? I like to play.\n
        \n
        Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
        \n
        Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
        \n
        Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
        \n
        I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
        \n
        I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720429542 {#4741
        date: 2024-07-08 11:05:42.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4747 …}
      +nested: Doctrine\ORM\PersistentCollection {#4749 …}
      +votes: Doctrine\ORM\PersistentCollection {#4751 …}
      +reports: Doctrine\ORM\PersistentCollection {#4753 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
      -id: 297069
      -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://reddrefuge.com/comment/851237"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704919019 {#4742
        date: 2024-01-10 21:36:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4746}
    +body: """
      > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      \n
      There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704928558 {#5187
      date: 2024-01-11 00:15:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5192 …}
    +nested: Doctrine\ORM\PersistentCollection {#5194 …}
    +votes: Doctrine\ORM\PersistentCollection {#5196 …}
    +reports: Doctrine\ORM\PersistentCollection {#5198 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5200 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5202 …}
    -id: 297651
    -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/5923527"
    +editedAt: DateTimeImmutable @1720418191 {#5188
      date: 2024-07-08 07:56:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704928558 {#5189
      date: 2024-01-11 00:15:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4746}
  +body: "Yep, all true. I was oversimplifying in my explanation, but you’re right. There’s a lot more to it than what I wrote - I was more relating docker to what we used to do with chroot jails."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704929831 {#5337
    date: 2024-01-11 00:37:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5340 …}
  +nested: Doctrine\ORM\PersistentCollection {#5342 …}
  +votes: Doctrine\ORM\PersistentCollection {#5344 …}
  +reports: Doctrine\ORM\PersistentCollection {#5346 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5348 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5350 …}
  -id: 297707
  -bodyTs: "'chroot':37 'docker':29 'explan':9 'jail':38 'lot':17 'oversimplifi':6 're':12 'relat':28 'right':13 'true':3 'use':33 'wrote':24 'yep':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851584"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704929831 {#5338
    date: 2024-01-11 00:37:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
104 DENIED moderate 
App\Entity\EntryComment {#5339
  +user: App\Entity\User {#4759 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5190
    +user: Proxies\__CG__\App\Entity\User {#5191 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: App\Entity\User {#4759 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        To answer each question:\n
        \n
        - You can run rootless containers but, importantly, you don’t need to run *Docker* as root. Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
        - True but, in my experience, most docker images are open source and have git repos - you can freely download the repo, inspect the build files, and build your own. I do this for some images I feel I want 100% control of, and have my own local Docker repo server to hold them.\n
        - It’s the opposite - you don’t really need to care about docker networks, unless you have an explicit need to contain a given container’s traffic to it’s own local net, and bind mounts are just maps to physical folders/files on the host system, with the added benefit of mounting read-only where required.\n
        \n
        I run containers on top of containers - Proxmox cluster, with a Linux container (CT) for each service. Most of those CTs are simply a Debian image I’ve created, running Docker and a couple of other bits. The services then sit inside Docker (usually) on each CT.\n
        \n
        It’s not messy at all. I use Portainer to manage all my Docker services, and Proxmox to manage the hosts themselves.\n
        \n
        Why? I like to play.\n
        \n
        Proxmox gives me full separation of each service - each one has its own CT. Think of that as me running dozens of Raspberry Pis, without the headache of managing all that hardware. Docker gives me complete portability and recoverability. I can move services around quite easily, and can update/rollback with ease.\n
        \n
        Finally, the combination of the two gives me a *huge* advantage over bare metal for rapid prototyping.\n
        \n
        Let’s say there’s a new contender that competes with Immich. I have Immich hosted on a CT, using Docker, and hiding behind Nginx Proxy Manager (also on a CT).\n
        \n
        I can spin up a Proxmox CT from my own template, use my Ansible playbook to provision Docker and all the other bits, load it in my Portainer management platform, and spin up the latest and greatest Immich competitor, all within mere minutes. Like, literally 10 minutes max.\n
        \n
        I have a play with the competitor for a bit. If I don’t like it, I just delete the CT and move on. If I do, I can point my `photos…` hostname (via Nginx Proxy Manager) to the new service and start using it full-time. Importantly, I can still keep my original Immich CT in place - maybe shutdown, maybe not - just in case I discover something I don’t like about the new kid on the block.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720429542 {#4741
        date: 2024-07-08 11:05:42.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4747 …}
      +nested: Doctrine\ORM\PersistentCollection {#4749 …}
      +votes: Doctrine\ORM\PersistentCollection {#4751 …}
      +reports: Doctrine\ORM\PersistentCollection {#4753 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4755 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4757 …}
      -id: 297069
      -bodyTs: "'10':379 '100':90 'ad':152 'advantag':296 'also':330 'ansibl':347 'answer':2 'around':278 'bare':298 'behind':326 'benefit':153 'bind':138 'bit':197,356,391 'block':461 'break':27 'build':74,77 'care':114 'case':447 'cluster':169 'combin':288 'compet':312 'competitor':372,388 'complet':270 'contain':9,125,128,163,167,173 'contend':310 'context':39 'control':91 'coupl':194 'creat':189 'ct':174,207,248,321,333,340,402,438 'cts':181 'daemon':46 'debian':185 'delet':400 'discov':449 'docker':18,30,45,57,98,116,191,203,221,267,323,351 'download':69 'dozen':255 'eas':285 'easili':280 'experi':55 'explicit':122 'feel':87 'file':75 'final':286 'folders/files':145 'freeli':68 'full':238,428 'full-tim':427 'git':64 'give':236,268,292 'given':127 'greatest':370 'happen':24 'hardwar':266 'headach':261 'hide':325 'hold':102 'host':50,148,228,318 'hostnam':414 'huge':295 'imag':58,85,186 'immich':314,317,371,437 'import':11,430 'insid':202 'inspect':72 'jail':31 'keep':434 'kid':458 'latest':368 'let':303 'like':232,377,396,454 'linux':172 'liter':378 'll':33 'load':357 'local':97,135 'manag':218,226,263,329,362,418 'map':142 'max':381 'mayb':441,443 'mere':375 'messi':211 'metal':299 'minut':376,380 'mount':139,155 'move':276,404 'need':15,112,123 'net':136 'network':117 'new':309,421,457 'nginx':327,416 'one':244 'open':60 'opposit':107 'origin':436 'photo':413 'physic':49,144 'pis':258 'place':440 'platform':363 'play':234,385 'playbook':348 'point':411 'portabl':271 'portain':216,361 'prototyp':302 'provis':350 'proxi':328,417 'proxmox':168,224,235,339 'question':4 'quit':279 'rapid':301 'raspberri':257 'read':157 'read-on':156 'realli':111 'recover':273 'repo':65,71,99 'requir':160 'root':20 'rootless':8 'run':7,17,36,43,162,190,254 'say':305 'separ':239 'server':100 'servic':177,199,222,242,277,422 'shutdown':442 'simpli':183 'sit':201 'someon':26 'someth':450 'sourc':61 'spin':336,365 'start':424 'still':433 'system':149 'templat':344 'think':249 'time':429 'top':165 'traffic':130 'true':51 'two':291 'unless':118 'unthink':23 'update/rollback':283 'use':215,322,345,425 'user':42 'usual':204 've':188 'via':415 'want':89 'within':374 'without':259"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://reddrefuge.com/comment/851237"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704919019 {#4742
        date: 2024-01-10 21:36:59.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4746}
    +body: """
      > Should the unthinkable happen, and someone “breaks out” of docker jail, they’ll only be running in the context of the user running the docker daemon on the physical host.\n
      \n
      There is no daemon in rootless mode. Instead of a daemon running containers in client/server mode you have regular user processes running containers using fork/exec. Not running as root is part and parcel of this approach and it’s a good thing, but the main motivator was not “what if someone breaks out of the container” (which doesn’t necessarily mean they’d get all the privileges of the running user on the host and anyway it would require a kernel exploit, which is a pretty tall order). There are many benefits to making running containers as easy as running any kind of process on a Linux host. And it also enabled some cool new features like the ability to run only partial layers of a container, or nested containers.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704928558 {#5187
      date: 2024-01-11 00:15:58.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
      "@Shimitar@feddit.it"
      "@DeltaTangoLima@reddrefuge.com"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5192 …}
    +nested: Doctrine\ORM\PersistentCollection {#5194 …}
    +votes: Doctrine\ORM\PersistentCollection {#5196 …}
    +reports: Doctrine\ORM\PersistentCollection {#5198 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5200 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5202 …}
    -id: 297651
    -bodyTs: "'abil':149 'also':141 'anyway':106 'approach':66 'benefit':122 'break':7,82 'client/server':45 'contain':43,53,86,126,157,160 'context':19 'cool':144 'd':93 'daemon':26,34,41 'docker':10,25 'doesn':88 'easi':128 'enabl':142 'exploit':112 'featur':146 'fork/exec':55 'get':94 'good':71 'happen':4 'host':30,104,138 'instead':38 'jail':11 'kernel':111 'kind':132 'layer':154 'like':147 'linux':137 'll':13 'main':75 'make':124 'mani':121 'mean':91 'mode':37,46 'motiv':76 'necessarili':90 'nest':159 'new':145 'order':118 'parcel':63 'part':61 'partial':153 'physic':29 'pretti':116 'privileg':97 'process':51,134 'regular':49 'requir':109 'root':59 'rootless':36 'run':16,23,42,52,57,100,125,130,151 'someon':6,81 'tall':117 'thing':72 'unthink':3 'use':54 'user':22,50,101 'would':108"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.nl/comment/5923527"
    +editedAt: DateTimeImmutable @1720418191 {#5188
      date: 2024-07-08 07:56:31.0 +02:00
    }
    +createdAt: DateTimeImmutable @1704928558 {#5189
      date: 2024-01-11 00:15:58.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4746}
  +body: "Yep, all true. I was oversimplifying in my explanation, but you’re right. There’s a lot more to it than what I wrote - I was more relating docker to what we used to do with chroot jails."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704929831 {#5337
    date: 2024-01-11 00:37:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@DeltaTangoLima@reddrefuge.com"
    "@lemmyvore@feddit.nl"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5340 …}
  +nested: Doctrine\ORM\PersistentCollection {#5342 …}
  +votes: Doctrine\ORM\PersistentCollection {#5344 …}
  +reports: Doctrine\ORM\PersistentCollection {#5346 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5348 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5350 …}
  -id: 297707
  -bodyTs: "'chroot':37 'docker':29 'explan':9 'jail':38 'lot':17 'oversimplifi':6 're':12 'relat':28 'right':13 'true':3 'use':33 'wrote':24 'yep':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://reddrefuge.com/comment/851584"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704929831 {#5338
    date: 2024-01-11 00:37:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
105 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
106 DENIED moderate 
App\Entity\EntryComment {#4821
  +user: App\Entity\User {#4834 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    **Why docker?**\n
    \n
    Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
    \n
    We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
    \n
    > oh but the underlying technologies aren’t proprietary\n
    \n
    True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
    \n
    > oh but there are alternatives like podman\n
    \n
    It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
    \n
    > lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720421110 {#4816
    date: 2024-07-08 08:45:10.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4822 …}
  +nested: Doctrine\ORM\PersistentCollection {#4824 …}
  +votes: Doctrine\ORM\PersistentCollection {#4826 …}
  +reports: Doctrine\ORM\PersistentCollection {#4828 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
  -id: 296462
  -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6557772"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704907443 {#4817
    date: 2024-01-10 18:24:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
107 DENIED edit 
App\Entity\EntryComment {#4821
  +user: App\Entity\User {#4834 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    **Why docker?**\n
    \n
    Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
    \n
    We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
    \n
    > oh but the underlying technologies aren’t proprietary\n
    \n
    True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
    \n
    > oh but there are alternatives like podman\n
    \n
    It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
    \n
    > lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720421110 {#4816
    date: 2024-07-08 08:45:10.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4822 …}
  +nested: Doctrine\ORM\PersistentCollection {#4824 …}
  +votes: Doctrine\ORM\PersistentCollection {#4826 …}
  +reports: Doctrine\ORM\PersistentCollection {#4828 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
  -id: 296462
  -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6557772"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704907443 {#4817
    date: 2024-01-10 18:24:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
108 DENIED moderate 
App\Entity\EntryComment {#4821
  +user: App\Entity\User {#4834 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    **Why docker?**\n
    \n
    Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
    \n
    We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
    \n
    > oh but the underlying technologies aren’t proprietary\n
    \n
    True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
    \n
    > oh but there are alternatives like podman\n
    \n
    It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
    \n
    > lots of mess in the system (mounts, fake networks, rules…)\n
    \n
    Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1720421110 {#4816
    date: 2024-07-08 08:45:10.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4822 …}
  +nested: Doctrine\ORM\PersistentCollection {#4824 …}
  +votes: Doctrine\ORM\PersistentCollection {#4826 …}
  +reports: Doctrine\ORM\PersistentCollection {#4828 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
  -id: 296462
  -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6557772"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704907443 {#4817
    date: 2024-01-10 18:24:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
109 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
110 DENIED moderate 
App\Entity\EntryComment {#5142
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4821
    +user: App\Entity\User {#4834 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      **Why docker?**\n
      \n
      Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
      \n
      We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
      \n
      > oh but the underlying technologies aren’t proprietary\n
      \n
      True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
      \n
      > oh but there are alternatives like podman\n
      \n
      It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
      \n
      > lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720421110 {#4816
      date: 2024-07-08 08:45:10.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4822 …}
    +nested: Doctrine\ORM\PersistentCollection {#4824 …}
    +votes: Doctrine\ORM\PersistentCollection {#4826 …}
    +reports: Doctrine\ORM\PersistentCollection {#4828 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
    -id: 296462
    -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6557772"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704907443 {#4817
      date: 2024-01-10 18:24:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: "Is all this true? Its a perspective I didn’t considered, but feels true, don’t know if it is tough."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704917422 {#5140
    date: 2024-01-10 21:10:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5143 …}
  +nested: Doctrine\ORM\PersistentCollection {#5145 …}
  +votes: Doctrine\ORM\PersistentCollection {#5147 …}
  +reports: Doctrine\ORM\PersistentCollection {#5149 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5151 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5153 …}
  -id: 296942
  -bodyTs: "'consid':11 'didn':9 'feel':13 'know':17 'perspect':7 'tough':21 'true':4,14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4822217"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704917422 {#5141
    date: 2024-01-10 21:10:22.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
111 DENIED edit 
App\Entity\EntryComment {#5142
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4821
    +user: App\Entity\User {#4834 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      **Why docker?**\n
      \n
      Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
      \n
      We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
      \n
      > oh but the underlying technologies aren’t proprietary\n
      \n
      True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
      \n
      > oh but there are alternatives like podman\n
      \n
      It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
      \n
      > lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720421110 {#4816
      date: 2024-07-08 08:45:10.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4822 …}
    +nested: Doctrine\ORM\PersistentCollection {#4824 …}
    +votes: Doctrine\ORM\PersistentCollection {#4826 …}
    +reports: Doctrine\ORM\PersistentCollection {#4828 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
    -id: 296462
    -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6557772"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704907443 {#4817
      date: 2024-01-10 18:24:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: "Is all this true? Its a perspective I didn’t considered, but feels true, don’t know if it is tough."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704917422 {#5140
    date: 2024-01-10 21:10:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5143 …}
  +nested: Doctrine\ORM\PersistentCollection {#5145 …}
  +votes: Doctrine\ORM\PersistentCollection {#5147 …}
  +reports: Doctrine\ORM\PersistentCollection {#5149 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5151 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5153 …}
  -id: 296942
  -bodyTs: "'consid':11 'didn':9 'feel':13 'know':17 'perspect':7 'tough':21 'true':4,14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4822217"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704917422 {#5141
    date: 2024-01-10 21:10:22.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
112 DENIED moderate 
App\Entity\EntryComment {#5142
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4821
    +user: App\Entity\User {#4834 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      **Why docker?**\n
      \n
      Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
      \n
      We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
      \n
      > oh but the underlying technologies aren’t proprietary\n
      \n
      True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
      \n
      > oh but there are alternatives like podman\n
      \n
      It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
      \n
      > lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720421110 {#4816
      date: 2024-07-08 08:45:10.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4822 …}
    +nested: Doctrine\ORM\PersistentCollection {#4824 …}
    +votes: Doctrine\ORM\PersistentCollection {#4826 …}
    +reports: Doctrine\ORM\PersistentCollection {#4828 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
    -id: 296462
    -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6557772"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704907443 {#4817
      date: 2024-01-10 18:24:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: "Is all this true? Its a perspective I didn’t considered, but feels true, don’t know if it is tough."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704917422 {#5140
    date: 2024-01-10 21:10:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5143 …}
  +nested: Doctrine\ORM\PersistentCollection {#5145 …}
  +votes: Doctrine\ORM\PersistentCollection {#5147 …}
  +reports: Doctrine\ORM\PersistentCollection {#5149 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5151 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5153 …}
  -id: 296942
  -bodyTs: "'consid':11 'didn':9 'feel':13 'know':17 'perspect':7 'tough':21 'true':4,14"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.it/comment/4822217"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704917422 {#5141
    date: 2024-01-10 21:10:22.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
113 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
114 DENIED moderate 
App\Entity\EntryComment {#5324
  +user: Proxies\__CG__\App\Entity\User {#5191 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5142
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4821
      +user: App\Entity\User {#4834 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        **Why docker?**\n
        \n
        Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
        \n
        We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
        \n
        > oh but the underlying technologies aren’t proprietary\n
        \n
        True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
        \n
        > oh but there are alternatives like podman\n
        \n
        It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
        \n
        > lots of mess in the system (mounts, fake networks, rules…)\n
        \n
        Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720421110 {#4816
        date: 2024-07-08 08:45:10.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4822 …}
      +nested: Doctrine\ORM\PersistentCollection {#4824 …}
      +votes: Doctrine\ORM\PersistentCollection {#4826 …}
      +reports: Doctrine\ORM\PersistentCollection {#4828 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
      -id: 296462
      -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6557772"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704907443 {#4817
        date: 2024-01-10 18:24:03.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4821}
    +body: "Is all this true? Its a perspective I didn’t considered, but feels true, don’t know if it is tough."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704917422 {#5140
      date: 2024-01-10 21:10:22.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@TCB13@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5143 …}
    +nested: Doctrine\ORM\PersistentCollection {#5145 …}
    +votes: Doctrine\ORM\PersistentCollection {#5147 …}
    +reports: Doctrine\ORM\PersistentCollection {#5149 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5151 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5153 …}
    -id: 296942
    -bodyTs: "'consid':11 'didn':9 'feel':13 'know':17 'perspect':7 'tough':21 'true':4,14"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4822217"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704917422 {#5141
      date: 2024-01-10 21:10:22.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: """
    It’s not true. I mean sure there are companies that try to lock you into their platforms but there’s no grand conspiracy of the lizard people the way OP makes it sound.\n
    \n
    Different people want different things from software. Professionals may prefer rootless podman or whatever but a home user probably doesn’t have the same requirements and the same high bar. They can make do with regular docker or with running things on the metal. It’s up to each person to evaluate what’s best for them. There’s no “One True Way” of hosting software services.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704928976 {#5322
    date: 2024-01-11 00:22:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5325 …}
  +nested: Doctrine\ORM\PersistentCollection {#5327 …}
  +votes: Doctrine\ORM\PersistentCollection {#5329 …}
  +reports: Doctrine\ORM\PersistentCollection {#5331 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5333 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5335 …}
  -id: 297673
  -bodyTs: "'bar':64 'best':89 'compani':10 'conspiraci':24 'differ':35,38 'docker':71 'doesn':54 'evalu':86 'grand':23 'high':63 'home':51 'host':99 'lizard':27 'lock':14 'make':32,67 'may':43 'mean':6 'metal':78 'one':95 'op':31 'peopl':28,36 'person':84 'platform':18 'podman':46 'prefer':44 'probabl':53 'profession':42 'regular':70 'requir':59 'rootless':45 'run':74 'servic':101 'softwar':41,100 'sound':34 'sure':7 'thing':39,75 'tri':12 'true':4,96 'user':52 'want':37 'way':30,97 'whatev':48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923692"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928976 {#5323
    date: 2024-01-11 00:22:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
115 DENIED edit 
App\Entity\EntryComment {#5324
  +user: Proxies\__CG__\App\Entity\User {#5191 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5142
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4821
      +user: App\Entity\User {#4834 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        **Why docker?**\n
        \n
        Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
        \n
        We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
        \n
        > oh but the underlying technologies aren’t proprietary\n
        \n
        True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
        \n
        > oh but there are alternatives like podman\n
        \n
        It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
        \n
        > lots of mess in the system (mounts, fake networks, rules…)\n
        \n
        Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720421110 {#4816
        date: 2024-07-08 08:45:10.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4822 …}
      +nested: Doctrine\ORM\PersistentCollection {#4824 …}
      +votes: Doctrine\ORM\PersistentCollection {#4826 …}
      +reports: Doctrine\ORM\PersistentCollection {#4828 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
      -id: 296462
      -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6557772"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704907443 {#4817
        date: 2024-01-10 18:24:03.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4821}
    +body: "Is all this true? Its a perspective I didn’t considered, but feels true, don’t know if it is tough."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704917422 {#5140
      date: 2024-01-10 21:10:22.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@TCB13@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5143 …}
    +nested: Doctrine\ORM\PersistentCollection {#5145 …}
    +votes: Doctrine\ORM\PersistentCollection {#5147 …}
    +reports: Doctrine\ORM\PersistentCollection {#5149 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5151 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5153 …}
    -id: 296942
    -bodyTs: "'consid':11 'didn':9 'feel':13 'know':17 'perspect':7 'tough':21 'true':4,14"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4822217"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704917422 {#5141
      date: 2024-01-10 21:10:22.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: """
    It’s not true. I mean sure there are companies that try to lock you into their platforms but there’s no grand conspiracy of the lizard people the way OP makes it sound.\n
    \n
    Different people want different things from software. Professionals may prefer rootless podman or whatever but a home user probably doesn’t have the same requirements and the same high bar. They can make do with regular docker or with running things on the metal. It’s up to each person to evaluate what’s best for them. There’s no “One True Way” of hosting software services.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704928976 {#5322
    date: 2024-01-11 00:22:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5325 …}
  +nested: Doctrine\ORM\PersistentCollection {#5327 …}
  +votes: Doctrine\ORM\PersistentCollection {#5329 …}
  +reports: Doctrine\ORM\PersistentCollection {#5331 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5333 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5335 …}
  -id: 297673
  -bodyTs: "'bar':64 'best':89 'compani':10 'conspiraci':24 'differ':35,38 'docker':71 'doesn':54 'evalu':86 'grand':23 'high':63 'home':51 'host':99 'lizard':27 'lock':14 'make':32,67 'may':43 'mean':6 'metal':78 'one':95 'op':31 'peopl':28,36 'person':84 'platform':18 'podman':46 'prefer':44 'probabl':53 'profession':42 'regular':70 'requir':59 'rootless':45 'run':74 'servic':101 'softwar':41,100 'sound':34 'sure':7 'thing':39,75 'tri':12 'true':4,96 'user':52 'want':37 'way':30,97 'whatev':48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923692"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928976 {#5323
    date: 2024-01-11 00:22:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
116 DENIED moderate 
App\Entity\EntryComment {#5324
  +user: Proxies\__CG__\App\Entity\User {#5191 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#5142
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4821
      +user: App\Entity\User {#4834 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        **Why docker?**\n
        \n
        Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
        \n
        We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
        \n
        > oh but the underlying technologies aren’t proprietary\n
        \n
        True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
        \n
        > oh but there are alternatives like podman\n
        \n
        It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
        \n
        > lots of mess in the system (mounts, fake networks, rules…)\n
        \n
        Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 8
      +score: 0
      +lastActive: DateTime @1720421110 {#4816
        date: 2024-07-08 08:45:10.0 +02:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@Shimitar@feddit.it"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4822 …}
      +nested: Doctrine\ORM\PersistentCollection {#4824 …}
      +votes: Doctrine\ORM\PersistentCollection {#4826 …}
      +reports: Doctrine\ORM\PersistentCollection {#4828 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
      -id: 296462
      -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6557772"
      +editedAt: null
      +createdAt: DateTimeImmutable @1704907443 {#4817
        date: 2024-01-10 18:24:03.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4821}
    +body: "Is all this true? Its a perspective I didn’t considered, but feels true, don’t know if it is tough."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1704917422 {#5140
      date: 2024-01-10 21:10:22.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
      "@TCB13@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#5143 …}
    +nested: Doctrine\ORM\PersistentCollection {#5145 …}
    +votes: Doctrine\ORM\PersistentCollection {#5147 …}
    +reports: Doctrine\ORM\PersistentCollection {#5149 …}
    +favourites: Doctrine\ORM\PersistentCollection {#5151 …}
    +notifications: Doctrine\ORM\PersistentCollection {#5153 …}
    -id: 296942
    -bodyTs: "'consid':11 'didn':9 'feel':13 'know':17 'perspect':7 'tough':21 'true':4,14"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://feddit.it/comment/4822217"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704917422 {#5141
      date: 2024-01-10 21:10:22.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: """
    It’s not true. I mean sure there are companies that try to lock you into their platforms but there’s no grand conspiracy of the lizard people the way OP makes it sound.\n
    \n
    Different people want different things from software. Professionals may prefer rootless podman or whatever but a home user probably doesn’t have the same requirements and the same high bar. They can make do with regular docker or with running things on the metal. It’s up to each person to evaluate what’s best for them. There’s no “One True Way” of hosting software services.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1704928976 {#5322
    date: 2024-01-11 00:22:56.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5325 …}
  +nested: Doctrine\ORM\PersistentCollection {#5327 …}
  +votes: Doctrine\ORM\PersistentCollection {#5329 …}
  +reports: Doctrine\ORM\PersistentCollection {#5331 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5333 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5335 …}
  -id: 297673
  -bodyTs: "'bar':64 'best':89 'compani':10 'conspiraci':24 'differ':35,38 'docker':71 'doesn':54 'evalu':86 'grand':23 'high':63 'home':51 'host':99 'lizard':27 'lock':14 'make':32,67 'may':43 'mean':6 'metal':78 'one':95 'op':31 'peopl':28,36 'person':84 'platform':18 'podman':46 'prefer':44 'probabl':53 'profession':42 'regular':70 'requir':59 'rootless':45 'run':74 'servic':101 'softwar':41,100 'sound':34 'sure':7 'thing':39,75 'tri':12 'true':4,96 'user':52 'want':37 'way':30,97 'whatev':48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5923692"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928976 {#5323
    date: 2024-01-11 00:22:56.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
117 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
118 DENIED moderate 
App\Entity\EntryComment {#5157
  +user: Proxies\__CG__\App\Entity\User {#5158 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4821
    +user: App\Entity\User {#4834 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      **Why docker?**\n
      \n
      Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
      \n
      We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
      \n
      > oh but the underlying technologies aren’t proprietary\n
      \n
      True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
      \n
      > oh but there are alternatives like podman\n
      \n
      It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
      \n
      > lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720421110 {#4816
      date: 2024-07-08 08:45:10.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4822 …}
    +nested: Doctrine\ORM\PersistentCollection {#4824 …}
    +votes: Doctrine\ORM\PersistentCollection {#4826 …}
    +reports: Doctrine\ORM\PersistentCollection {#4828 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
    -id: 296462
    -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6557772"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704907443 {#4817
      date: 2024-01-10 18:24:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: """
    This is a really bad take. I’m all for OSS, but that doesn’t mean that there isn’t value with things like Docker.\n
    \n
    Yes, developers know less about infra. I’d argue that can be a *good* thing. I don’t need my devs to understand VLANs, the nuances of DNS, or any of that. I need them to code, and code well. That’s why we have devops/infra people. If my devs to know it? Awesome, but docker and containerization allows them to focus on code and let my ops teams figure out how they want to put it in production.\n
    \n
    As for OSS - sure, someone can come along and make an OSS solution. Until then - I don’t really care. Same thing with cloud providers. It’s all well and good to have opinions about OSS, but when it comes to companies being able to push code quickly and scalably, then yeah I’m hiring the ops team who knows kubernetes and containerization vs someone who’s going to spend weeks trying to spin up bare iron machines.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704908827 {#5155
    date: 2024-01-10 18:47:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5159 …}
  +nested: Doctrine\ORM\PersistentCollection {#5161 …}
  +votes: Doctrine\ORM\PersistentCollection {#5163 …}
  +reports: Doctrine\ORM\PersistentCollection {#5165 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5167 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5169 …}
  -id: 297152
  -bodyTs: "'abl':148 'allow':84 'along':112 'argu':34 'awesom':79 'bad':5 'bare':180 'care':124 'cloud':128 'code':62,64,89,151 'come':111,144 'compani':146 'container':83,167 'd':33 'dev':46,75 'develop':27 'devops/infra':71 'dns':53 'docker':25,81 'doesn':14 'figur':95 'focus':87 'go':172 'good':39,135 'hire':159 'infra':31 'iron':181 'isn':19 'know':28,77,164 'kubernet':165 'less':29 'let':91 'like':24 'm':8,158 'machin':182 'make':114 'mean':16 'need':44,59 'nuanc':51 'op':93,161 'opinion':138 'oss':11,107,116,140 'peopl':72 'product':104 'provid':129 'push':150 'put':101 'quick':152 'realli':4,123 'scalabl':154 'solut':117 'someon':109,169 'spend':174 'spin':178 'sure':108 'take':6 'team':94,162 'thing':23,40,126 'tri':176 'understand':48 'valu':21 'vlan':49 'vs':168 'want':99 'week':175 'well':65,133 'yeah':156 'yes':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://poptalk.scrubbles.tech/comment/1410713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704908827 {#5156
    date: 2024-01-10 18:47:07.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
119 DENIED edit 
App\Entity\EntryComment {#5157
  +user: Proxies\__CG__\App\Entity\User {#5158 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4821
    +user: App\Entity\User {#4834 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      **Why docker?**\n
      \n
      Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
      \n
      We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
      \n
      > oh but the underlying technologies aren’t proprietary\n
      \n
      True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
      \n
      > oh but there are alternatives like podman\n
      \n
      It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
      \n
      > lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720421110 {#4816
      date: 2024-07-08 08:45:10.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4822 …}
    +nested: Doctrine\ORM\PersistentCollection {#4824 …}
    +votes: Doctrine\ORM\PersistentCollection {#4826 …}
    +reports: Doctrine\ORM\PersistentCollection {#4828 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
    -id: 296462
    -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6557772"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704907443 {#4817
      date: 2024-01-10 18:24:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: """
    This is a really bad take. I’m all for OSS, but that doesn’t mean that there isn’t value with things like Docker.\n
    \n
    Yes, developers know less about infra. I’d argue that can be a *good* thing. I don’t need my devs to understand VLANs, the nuances of DNS, or any of that. I need them to code, and code well. That’s why we have devops/infra people. If my devs to know it? Awesome, but docker and containerization allows them to focus on code and let my ops teams figure out how they want to put it in production.\n
    \n
    As for OSS - sure, someone can come along and make an OSS solution. Until then - I don’t really care. Same thing with cloud providers. It’s all well and good to have opinions about OSS, but when it comes to companies being able to push code quickly and scalably, then yeah I’m hiring the ops team who knows kubernetes and containerization vs someone who’s going to spend weeks trying to spin up bare iron machines.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704908827 {#5155
    date: 2024-01-10 18:47:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5159 …}
  +nested: Doctrine\ORM\PersistentCollection {#5161 …}
  +votes: Doctrine\ORM\PersistentCollection {#5163 …}
  +reports: Doctrine\ORM\PersistentCollection {#5165 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5167 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5169 …}
  -id: 297152
  -bodyTs: "'abl':148 'allow':84 'along':112 'argu':34 'awesom':79 'bad':5 'bare':180 'care':124 'cloud':128 'code':62,64,89,151 'come':111,144 'compani':146 'container':83,167 'd':33 'dev':46,75 'develop':27 'devops/infra':71 'dns':53 'docker':25,81 'doesn':14 'figur':95 'focus':87 'go':172 'good':39,135 'hire':159 'infra':31 'iron':181 'isn':19 'know':28,77,164 'kubernet':165 'less':29 'let':91 'like':24 'm':8,158 'machin':182 'make':114 'mean':16 'need':44,59 'nuanc':51 'op':93,161 'opinion':138 'oss':11,107,116,140 'peopl':72 'product':104 'provid':129 'push':150 'put':101 'quick':152 'realli':4,123 'scalabl':154 'solut':117 'someon':109,169 'spend':174 'spin':178 'sure':108 'take':6 'team':94,162 'thing':23,40,126 'tri':176 'understand':48 'valu':21 'vlan':49 'vs':168 'want':99 'week':175 'well':65,133 'yeah':156 'yes':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://poptalk.scrubbles.tech/comment/1410713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704908827 {#5156
    date: 2024-01-10 18:47:07.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
120 DENIED moderate 
App\Entity\EntryComment {#5157
  +user: Proxies\__CG__\App\Entity\User {#5158 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4821
    +user: App\Entity\User {#4834 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      **Why docker?**\n
      \n
      Its all about **companies re-creating and reconfiguring the way people develop software so everyone will be hostage of their platforms**. We see this in everything now Docker/DockerHub/Kubernetes and GitHub actions were the first sign of this cancer.\n
      \n
      We now have a generation of developers that doesn’t understand the basic of their tech stack, about networking, about DNS, about how to deploy a simple thing into a server that doesn’t use some Docker or isn’t a 3rd party cloud xyz deploy-from-github service.\n
      \n
      > oh but the underlying technologies aren’t proprietary\n
      \n
      True, but this Docker hype invariably and inevitably leads people down a path that will then require some proprietary solution or dependency somewhere that is only required because the “new” technology itself alone doesn’t deliver as others did in the past. In this particular case is Docker Hub / Kubernetes BS and all the cloud garbage around it.\n
      \n
      > oh but there are alternatives like podman\n
      \n
      It doesn’t really matter if there are truly open-source and open ecosystems of containerization technologies because in the end people/companies will pick the proprietary / closed option just because “it’s easier to use” or some other specific thing that will be good on the short term and very bad on the long term. This happened with CentOS vs Debian is currently unfolding with Docker vs LXC/RKT/Podman and will happen with Ubuntu vs Debian for all those who moved from CentOS to Ubuntu.\n
      \n
      > lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      Yes, a total mess of devices hard to audit, constant ram wasting and worse than all it isn’t as easy change a docker image / develop things as it used to be.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1720421110 {#4816
      date: 2024-07-08 08:45:10.0 +02:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@Shimitar@feddit.it"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4822 …}
    +nested: Doctrine\ORM\PersistentCollection {#4824 …}
    +votes: Doctrine\ORM\PersistentCollection {#4826 …}
    +reports: Doctrine\ORM\PersistentCollection {#4828 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4830 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4832 …}
    -id: 296462
    -bodyTs: "'3rd':83 'action':34 'alon':132 'altern':162 'aren':97 'around':156 'audit':268 'bad':216 'basic':54 'bs':150 'cancer':41 'case':145 'cento':224,247 'chang':281 'close':192 'cloud':85,154 'compani':6 'constant':269 'container':181 'creat':9 'current':228 'debian':226,240 'deliv':135 'depend':121 'deploy':66,88 'deploy-from-github':87 'develop':15,48,285 'devic':265 'dns':62 'docker':2,78,103,147,231,283 'docker/dockerhub/kubernetes':31 'doesn':50,74,133,166 'easi':280 'easier':198 'ecosystem':179 'end':186 'everyon':18 'everyth':29 'fake':257 'first':37 'garbag':155 'generat':46 'github':33,90 'good':209 'happen':222,236 'hard':266 'hostag':21 'hub':148 'hype':104 'imag':284 'inevit':107 'invari':105 'isn':80,277 'kubernet':149 'lead':108 'like':163 'long':219 'lot':250 'lxc/rkt/podman':233 'matter':169 'mess':252,263 'mount':256 'move':245 'network':60,258 'new':129 'oh':92,158 'open':175,178 'open-sourc':174 'option':193 'other':137 'parti':84 'particular':144 'past':141 'path':112 'peopl':14,109 'people/companies':187 'pick':189 'platform':24 'podman':164 'proprietari':99,118,191 'ram':270 're':8 're-creat':7 'realli':168 'reconfigur':11 'requir':116,126 'rule':259 'see':26 'server':72 'servic':91 'short':212 'sign':38 'simpl':68 'softwar':16 'solut':119 'somewher':122 'sourc':176 'specif':204 'stack':58 'system':255 'tech':57 'technolog':96,130,182 'term':213,220 'thing':69,205,286 'total':262 'true':100 'truli':173 'ubuntu':238,249 'under':95 'understand':52 'unfold':229 'use':76,200,289 'vs':225,232,239 'wast':271 'way':13 'wors':273 'xyz':86 'yes':260"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6557772"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704907443 {#4817
      date: 2024-01-10 18:24:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4821}
  +body: """
    This is a really bad take. I’m all for OSS, but that doesn’t mean that there isn’t value with things like Docker.\n
    \n
    Yes, developers know less about infra. I’d argue that can be a *good* thing. I don’t need my devs to understand VLANs, the nuances of DNS, or any of that. I need them to code, and code well. That’s why we have devops/infra people. If my devs to know it? Awesome, but docker and containerization allows them to focus on code and let my ops teams figure out how they want to put it in production.\n
    \n
    As for OSS - sure, someone can come along and make an OSS solution. Until then - I don’t really care. Same thing with cloud providers. It’s all well and good to have opinions about OSS, but when it comes to companies being able to push code quickly and scalably, then yeah I’m hiring the ops team who knows kubernetes and containerization vs someone who’s going to spend weeks trying to spin up bare iron machines.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1704908827 {#5155
    date: 2024-01-10 18:47:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
    "@TCB13@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5159 …}
  +nested: Doctrine\ORM\PersistentCollection {#5161 …}
  +votes: Doctrine\ORM\PersistentCollection {#5163 …}
  +reports: Doctrine\ORM\PersistentCollection {#5165 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5167 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5169 …}
  -id: 297152
  -bodyTs: "'abl':148 'allow':84 'along':112 'argu':34 'awesom':79 'bad':5 'bare':180 'care':124 'cloud':128 'code':62,64,89,151 'come':111,144 'compani':146 'container':83,167 'd':33 'dev':46,75 'develop':27 'devops/infra':71 'dns':53 'docker':25,81 'doesn':14 'figur':95 'focus':87 'go':172 'good':39,135 'hire':159 'infra':31 'iron':181 'isn':19 'know':28,77,164 'kubernet':165 'less':29 'let':91 'like':24 'm':8,158 'machin':182 'make':114 'mean':16 'need':44,59 'nuanc':51 'op':93,161 'opinion':138 'oss':11,107,116,140 'peopl':72 'product':104 'provid':129 'push':150 'put':101 'quick':152 'realli':4,123 'scalabl':154 'solut':117 'someon':109,169 'spend':174 'spin':178 'sure':108 'take':6 'team':94,162 'thing':23,40,126 'tri':176 'understand':48 'valu':21 'vlan':49 'vs':168 'want':99 'week':175 'well':65,133 'yeah':156 'yes':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://poptalk.scrubbles.tech/comment/1410713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704908827 {#5156
    date: 2024-01-10 18:47:07.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
121 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
122 DENIED moderate 
App\Entity\EntryComment {#4896
  +user: App\Entity\User {#4909 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Docker can be run rootless. Podman is rootless by default.\n
    \n
    I build certain containers from scratch. Very popular FOSS software can be trusted, but if you’re as paranoid, you should probably run the bare-minimum software in the first-place.\n
    \n
    It’s a mess if you’re not used to it. But yes, normal unix networking is somewhat simpler (like someone mentioned, LXC containers can be a decent idea). Well, you’ll realise that Docker is not really top-dog in terms of complexity when you start playing with the big boys like full-fledged k8s
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1704910812 {#4891
    date: 2024-01-10 19:20:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4897 …}
  +nested: Doctrine\ORM\PersistentCollection {#4899 …}
  +votes: Doctrine\ORM\PersistentCollection {#4901 …}
  +reports: Doctrine\ORM\PersistentCollection {#4903 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4905 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4907 …}
  -id: 296613
  -bodyTs: "'bare':36 'bare-minimum':35 'big':95 'boy':96 'build':12 'certain':13 'complex':88 'contain':14,67 'decent':71 'default':10 'docker':1,78 'dog':84 'first':42 'first-plac':41 'fledg':100 'foss':19 'full':99 'full-fledg':98 'idea':72 'k8s':101 'like':63,97 'll':75 'lxc':66 'mention':65 'mess':47 'minimum':37 'network':59 'normal':57 'paranoid':29 'place':43 'play':92 'podman':6 'popular':18 'probabl':32 're':27,50 'realis':76 'realli':81 'rootless':5,8 'run':4,33 'scratch':16 'simpler':62 'softwar':20,38 'someon':64 'somewhat':61 'start':91 'term':86 'top':83 'top-dog':82 'trust':23 'unix':58 'use':52 'well':73 'yes':56"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6558871"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704910812 {#4892
    date: 2024-01-10 19:20:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
123 DENIED edit 
App\Entity\EntryComment {#4896
  +user: App\Entity\User {#4909 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Docker can be run rootless. Podman is rootless by default.\n
    \n
    I build certain containers from scratch. Very popular FOSS software can be trusted, but if you’re as paranoid, you should probably run the bare-minimum software in the first-place.\n
    \n
    It’s a mess if you’re not used to it. But yes, normal unix networking is somewhat simpler (like someone mentioned, LXC containers can be a decent idea). Well, you’ll realise that Docker is not really top-dog in terms of complexity when you start playing with the big boys like full-fledged k8s
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1704910812 {#4891
    date: 2024-01-10 19:20:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4897 …}
  +nested: Doctrine\ORM\PersistentCollection {#4899 …}
  +votes: Doctrine\ORM\PersistentCollection {#4901 …}
  +reports: Doctrine\ORM\PersistentCollection {#4903 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4905 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4907 …}
  -id: 296613
  -bodyTs: "'bare':36 'bare-minimum':35 'big':95 'boy':96 'build':12 'certain':13 'complex':88 'contain':14,67 'decent':71 'default':10 'docker':1,78 'dog':84 'first':42 'first-plac':41 'fledg':100 'foss':19 'full':99 'full-fledg':98 'idea':72 'k8s':101 'like':63,97 'll':75 'lxc':66 'mention':65 'mess':47 'minimum':37 'network':59 'normal':57 'paranoid':29 'place':43 'play':92 'podman':6 'popular':18 'probabl':32 're':27,50 'realis':76 'realli':81 'rootless':5,8 'run':4,33 'scratch':16 'simpler':62 'softwar':20,38 'someon':64 'somewhat':61 'start':91 'term':86 'top':83 'top-dog':82 'trust':23 'unix':58 'use':52 'well':73 'yes':56"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6558871"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704910812 {#4892
    date: 2024-01-10 19:20:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
124 DENIED moderate 
App\Entity\EntryComment {#4896
  +user: App\Entity\User {#4909 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Docker can be run rootless. Podman is rootless by default.\n
    \n
    I build certain containers from scratch. Very popular FOSS software can be trusted, but if you’re as paranoid, you should probably run the bare-minimum software in the first-place.\n
    \n
    It’s a mess if you’re not used to it. But yes, normal unix networking is somewhat simpler (like someone mentioned, LXC containers can be a decent idea). Well, you’ll realise that Docker is not really top-dog in terms of complexity when you start playing with the big boys like full-fledged k8s
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1704910812 {#4891
    date: 2024-01-10 19:20:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4897 …}
  +nested: Doctrine\ORM\PersistentCollection {#4899 …}
  +votes: Doctrine\ORM\PersistentCollection {#4901 …}
  +reports: Doctrine\ORM\PersistentCollection {#4903 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4905 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4907 …}
  -id: 296613
  -bodyTs: "'bare':36 'bare-minimum':35 'big':95 'boy':96 'build':12 'certain':13 'complex':88 'contain':14,67 'decent':71 'default':10 'docker':1,78 'dog':84 'first':42 'first-plac':41 'fledg':100 'foss':19 'full':99 'full-fledg':98 'idea':72 'k8s':101 'like':63,97 'll':75 'lxc':66 'mention':65 'mess':47 'minimum':37 'network':59 'normal':57 'paranoid':29 'place':43 'play':92 'podman':6 'popular':18 'probabl':32 're':27,50 'realis':76 'realli':81 'rootless':5,8 'run':4,33 'scratch':16 'simpler':62 'softwar':20,38 'someon':64 'somewhat':61 'start':91 'term':86 'top':83 'top-dog':82 'trust':23 'unix':58 'use':52 'well':73 'yes':56"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6558871"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704910812 {#4892
    date: 2024-01-10 19:20:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
125 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
126 DENIED moderate 
App\Entity\EntryComment {#4969
  +user: App\Entity\User {#4982 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Portability is the key for me, because I tend to switch things around a lot. Containers generally isolate the persistent data from the runtime really well.\n
    \n
    Docker is not the only, or even the best way IMO to run containers. If I was providing services for customers, I would definetly build most container images daily in some automated way. Well, I do it already for quite a few.\n
    \n
    The mess is only a mess if you don’t really understand what you’re doing, same goes for traditional services.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1704912885 {#4964
    date: 2024-01-10 19:54:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4970 …}
  +nested: Doctrine\ORM\PersistentCollection {#4972 …}
  +votes: Doctrine\ORM\PersistentCollection {#4974 …}
  +reports: Doctrine\ORM\PersistentCollection {#4976 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
  -id: 296714
  -bodyTs: "'alreadi':64 'around':13 'autom':58 'best':35 'build':51 'contain':16,40,53 'custom':47 'daili':55 'data':21 'definet':50 'docker':27 'even':33 'general':17 'goe':86 'imag':54 'imo':37 'isol':18 'key':4 'lot':15 'mess':70,74 'persist':20 'portabl':1 'provid':44 'quit':66 're':83 'realli':25,79 'run':39 'runtim':24 'servic':45,89 'switch':11 'tend':9 'thing':12 'tradit':88 'understand':80 'way':36,59 'well':26,60 'would':49"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/5994675"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704912885 {#4965
    date: 2024-01-10 19:54:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
127 DENIED edit 
App\Entity\EntryComment {#4969
  +user: App\Entity\User {#4982 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Portability is the key for me, because I tend to switch things around a lot. Containers generally isolate the persistent data from the runtime really well.\n
    \n
    Docker is not the only, or even the best way IMO to run containers. If I was providing services for customers, I would definetly build most container images daily in some automated way. Well, I do it already for quite a few.\n
    \n
    The mess is only a mess if you don’t really understand what you’re doing, same goes for traditional services.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1704912885 {#4964
    date: 2024-01-10 19:54:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4970 …}
  +nested: Doctrine\ORM\PersistentCollection {#4972 …}
  +votes: Doctrine\ORM\PersistentCollection {#4974 …}
  +reports: Doctrine\ORM\PersistentCollection {#4976 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
  -id: 296714
  -bodyTs: "'alreadi':64 'around':13 'autom':58 'best':35 'build':51 'contain':16,40,53 'custom':47 'daili':55 'data':21 'definet':50 'docker':27 'even':33 'general':17 'goe':86 'imag':54 'imo':37 'isol':18 'key':4 'lot':15 'mess':70,74 'persist':20 'portabl':1 'provid':44 'quit':66 're':83 'realli':25,79 'run':39 'runtim':24 'servic':45,89 'switch':11 'tend':9 'thing':12 'tradit':88 'understand':80 'way':36,59 'well':26,60 'would':49"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/5994675"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704912885 {#4965
    date: 2024-01-10 19:54:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
128 DENIED moderate 
App\Entity\EntryComment {#4969
  +user: App\Entity\User {#4982 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Portability is the key for me, because I tend to switch things around a lot. Containers generally isolate the persistent data from the runtime really well.\n
    \n
    Docker is not the only, or even the best way IMO to run containers. If I was providing services for customers, I would definetly build most container images daily in some automated way. Well, I do it already for quite a few.\n
    \n
    The mess is only a mess if you don’t really understand what you’re doing, same goes for traditional services.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1704912885 {#4964
    date: 2024-01-10 19:54:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4970 …}
  +nested: Doctrine\ORM\PersistentCollection {#4972 …}
  +votes: Doctrine\ORM\PersistentCollection {#4974 …}
  +reports: Doctrine\ORM\PersistentCollection {#4976 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
  -id: 296714
  -bodyTs: "'alreadi':64 'around':13 'autom':58 'best':35 'build':51 'contain':16,40,53 'custom':47 'daili':55 'data':21 'definet':50 'docker':27 'even':33 'general':17 'goe':86 'imag':54 'imo':37 'isol':18 'key':4 'lot':15 'mess':70,74 'persist':20 'portabl':1 'provid':44 'quit':66 're':83 'realli':25,79 'run':39 'runtim':24 'servic':45,89 'switch':11 'tend':9 'thing':12 'tradit':88 'understand':80 'way':36,59 'well':26,60 'would':49"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/5994675"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704912885 {#4965
    date: 2024-01-10 19:54:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
129 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
130 DENIED moderate 
App\Entity\EntryComment {#5042
  +user: App\Entity\User {#5055 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have VMs on my metal, one specific for containers.\n
    \n
    Though I use LXC. Docker started with LXC, then grew bigger, and I don’t like how big it is.\n
    \n
    If I can set up one simple NAT and run everything inside a container, I don’t need Docker.\n
    \n
    Docker’s main advantage is the hub.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704928613 {#5037
    date: 2024-01-11 00:16:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5043 …}
  +nested: Doctrine\ORM\PersistentCollection {#5045 …}
  +votes: Doctrine\ORM\PersistentCollection {#5047 …}
  +reports: Doctrine\ORM\PersistentCollection {#5049 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5051 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5053 …}
  -id: 297655
  -bodyTs: "'advantag':53 'big':28 'bigger':21 'contain':10,44 'docker':15,49,50 'everyth':41 'grew':20 'hub':56 'insid':42 'like':26 'lxc':14,18 'main':52 'metal':6 'nat':38 'need':48 'one':7,36 'run':40 'set':34 'simpl':37 'specif':8 'start':16 'though':11 'use':13 'vms':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6317079"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928613 {#5038
    date: 2024-01-11 00:16:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
131 DENIED edit 
App\Entity\EntryComment {#5042
  +user: App\Entity\User {#5055 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have VMs on my metal, one specific for containers.\n
    \n
    Though I use LXC. Docker started with LXC, then grew bigger, and I don’t like how big it is.\n
    \n
    If I can set up one simple NAT and run everything inside a container, I don’t need Docker.\n
    \n
    Docker’s main advantage is the hub.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704928613 {#5037
    date: 2024-01-11 00:16:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5043 …}
  +nested: Doctrine\ORM\PersistentCollection {#5045 …}
  +votes: Doctrine\ORM\PersistentCollection {#5047 …}
  +reports: Doctrine\ORM\PersistentCollection {#5049 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5051 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5053 …}
  -id: 297655
  -bodyTs: "'advantag':53 'big':28 'bigger':21 'contain':10,44 'docker':15,49,50 'everyth':41 'grew':20 'hub':56 'insid':42 'like':26 'lxc':14,18 'main':52 'metal':6 'nat':38 'need':48 'one':7,36 'run':40 'set':34 'simpl':37 'specif':8 'start':16 'though':11 'use':13 'vms':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6317079"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928613 {#5038
    date: 2024-01-11 00:16:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
132 DENIED moderate 
App\Entity\EntryComment {#5042
  +user: App\Entity\User {#5055 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#274
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#268
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#270
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Why-docker"
    +title: "Why docker"
    +url: null
    +body: """
      Hi! Question in the title.\n
      \n
      I get that its super easy to setup. But its really worthwhile to have something that:\n
      \n
      - runs everything as root (not many well built images with proper useranagement it seems)\n
      - you cannot really know which stuff is in the images: you must trust who built it\n
      - lots of mess in the system (mounts, fake networks, rules…)\n
      \n
      I always host on bare metal when I can, but sometimes (immich, I look at you!) Seems almost impossible.\n
      \n
      I get docker in a work environment, but on self hosted? Is it really worth while? I would like to hear your opinions fellow hosters.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 50
    +favouriteCount: 89
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1722359949 {#2418
      date: 2024-07-30 19:19:09.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 28686
    -titleTs: "'docker':2"
    -bodyTs: "'almost':79 'alway':63 'bare':66 'built':29,50 'cannot':37 'docker':83 'easi':11 'environ':87 'everyth':23 'fake':59 'fellow':104 'get':7,82 'hear':101 'hi':1 'host':64,91 'hoster':105 'imag':30,45 'immich':73 'imposs':80 'know':39 'like':99 'look':75 'lot':52 'mani':27 'mess':54 'metal':67 'mount':58 'must':47 'network':60 'opinion':103 'proper':32 'question':2 'realli':16,38,94 'root':25 'rule':61 'run':22 'seem':35,78 'self':90 'setup':13 'someth':20 'sometim':72 'stuff':41 'super':10 'system':57 'titl':5 'trust':48 'useranag':33 'well':28 'work':86 'worth':95 'worthwhil':17 'would':98"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704992786
    +visibility: "visible             "
    +apId: "https://feddit.it/post/4722445"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704906386 {#1858
      date: 2024-01-10 18:06:26.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I have VMs on my metal, one specific for containers.\n
    \n
    Though I use LXC. Docker started with LXC, then grew bigger, and I don’t like how big it is.\n
    \n
    If I can set up one simple NAT and run everything inside a container, I don’t need Docker.\n
    \n
    Docker’s main advantage is the hub.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704928613 {#5037
    date: 2024-01-11 00:16:53.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Shimitar@feddit.it"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5043 …}
  +nested: Doctrine\ORM\PersistentCollection {#5045 …}
  +votes: Doctrine\ORM\PersistentCollection {#5047 …}
  +reports: Doctrine\ORM\PersistentCollection {#5049 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5051 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5053 …}
  -id: 297655
  -bodyTs: "'advantag':53 'big':28 'bigger':21 'contain':10,44 'docker':15,49,50 'everyth':41 'grew':20 'hub':56 'insid':42 'like':26 'lxc':14,18 'main':52 'metal':6 'nat':38 'need':48 'one':7,36 'run':40 'set':34 'simpl':37 'specif':8 'start':16 'though':11 'use':13 'vms':3"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6317079"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704928613 {#5038
    date: 2024-01-11 00:16:53.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
133 DENIED edit 
App\Entity\Magazine {#264
  +icon: Proxies\__CG__\App\Entity\Image {#245 …}
  +name: "selfhosted@lemmy.world"
  +title: "selfhosted"
  +description: """
    A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
    \n
    Rules:\n
    \n
    - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
    - No spam posting.\n
    - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
    - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
    - No trolling.\n
    \n
    Resources:\n
    \n
    - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
    - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
    - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
    \n
    > Any issues on the community? Report it using the report flag.\n
    \n
    > Questions? DM the mods!
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 222
  +entryCommentCount: 3916
  +postCount: 0
  +postCommentCount: 0
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729582735 {#274
    date: 2024-10-22 09:38:55.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#236 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
  +entries: Doctrine\ORM\PersistentCollection {#179 …}
  +posts: Doctrine\ORM\PersistentCollection {#137 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
  +bans: Doctrine\ORM\PersistentCollection {#116 …}
  +reports: Doctrine\ORM\PersistentCollection {#102 …}
  +badges: Doctrine\ORM\PersistentCollection {#80 …}
  +logs: Doctrine\ORM\PersistentCollection {#70 …}
  +awards: Doctrine\ORM\PersistentCollection {#1360 …}
  +categories: Doctrine\ORM\PersistentCollection {#1792 …}
  -id: 120
  +apId: "selfhosted@lemmy.world"
  +apProfileId: "https://lemmy.world/c/selfhosted"
  +apPublicUrl: "https://lemmy.world/c/selfhosted"
  +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
  +apInboxUrl: "https://lemmy.world/inbox"
  +apDomain: "lemmy.world"
  +apPreferredUsername: "selfhosted"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1703473826 {#268
    date: 2023-12-25 04:10:26.0 +01:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1703473826 {#270
    date: 2023-12-25 04:10:26.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details