To setup kubernetes inside lxc you have to enable quite some capabilities inside host kernel and lxd containers that can be used to escalate privileges from beeing root in container to root in proxmox. Not completely sure but since even containerd containers share the same kernel, attacker might escalate directly from pod to proxmox host. But this last par I am not sure about.
- 0 Posts
- 10 Comments
I just recently tried to setup k3s in proxmox LXC containers. I had to do everything again after I learned it was not possible to make this setup without comproimising security and isolation. Now I run kubernetes inside virtual machines in proxmox.
zzffyfajzkzhnsweqm@sh.itjust.worksto Technology@lemmy.world•Mastercard and Visa face backlash after hundreds of adult games removed from online stores Steam and Itch.ioEnglish2·1 month agoDo you mean digital euro? https://en.m.wikipedia.org/wiki/Digital_euro
This would be the only thing that could break visa mastercard duopol. Hopefully 2028
zzffyfajzkzhnsweqm@sh.itjust.worksto Technology@lemmy.world•Mastercard and Visa face backlash after hundreds of adult games removed from online stores Steam and Itch.ioEnglish4·1 month agoWe should hope digital euro breaks this: https://en.m.wikipedia.org/wiki/Digital_euro
zzffyfajzkzhnsweqm@sh.itjust.worksto You Should Know@lemmy.world•YSK You don't need Teflon pans for nonstickEnglish1·4 months agoTeflon itself cannot penetrate your cells and actually do leave your body without harming you in the long run. However other forever chemicals do add up and cause cancer. Check video from Veritassium who imo explained it very well. https://www.youtube.com/watch?v=SC2eSujzrUY
zzffyfajzkzhnsweqm@sh.itjust.worksto Today I Learned@lemmy.world•TIL there’s a historical list of sexually active popes, including notes on whether they had childrenEnglish3·4 months agoSome event recently inspired me to duckduckgo political system in Vatican. And Vatican is elective monarchy. And most often elective monarchies gradually become inheritable monarchies. But Vatican for some reason kept their status for millennials. :) So I believe political reasons are somewhere in this direction for priests and their fortune. However there are also some theological reasons for this decision in church.
zzffyfajzkzhnsweqm@sh.itjust.worksto Today I Learned@lemmy.world•TIL there’s a historical list of sexually active popes, including notes on whether they had childrenEnglish51·4 months agoPriests having female housekeepers is still very common. Because men back then did not know how to take care of themselves. And some still do not. It was common for them to take their sisters as housekeepers just to avoid rumors. Or young priests purposely have housekeepers that are really old.
So by not denying in some occasions they were living as a couple, this was never the default. But yes rumors were and still are the default.
zzffyfajzkzhnsweqm@sh.itjust.worksto Global News@lemmy.zip•Slovenia to vote in referendum on artist pension that has fostered culture warEnglish3·4 months agoI have the biggest problem with two government parties calling for boycott of this referendum. Which I find undemocratic.
We are voting if we accept a more regulation on special pensions for best artists. Previous law allows minister to give pensions to anyone they want. Also previous law from Yugoslavia allowed inheritance of those pensions. New law forbids that. Old law was also criticized by many independent institutions to be too broad.
Opposition wants to present this referendum as “should we give those pension at all”. Their position is we should not. And some parties want to give different kinds of awards for best artists.
But this is not the question we will be asked at all. The choice is between new regulative law and old law.
However this referendum really is stupid. But one should still vote and vote for accepting new law which is still better than the old one (even if just marginally and you want to remove those rewards in the long run).
zzffyfajzkzhnsweqm@sh.itjust.worksto World News@lemmy.ml•Israel's Netanyahu to visit Hungary April 2-6English1·5 months agoOrban said they do not have to, due to some specific law they have. And he also said they will welcome Netanjahu.
Or when your additional content (like this) comes with another additional content (like previous example but with another parenthesis (eg. this example)). And now no one can read my sentences.