Description: Commentary on news, Linux, programming, music, web design, trivia, humor, usability and whatever else strikes his fancy at the time.
web hosting (232829) web design (202626) blog (30164) linux (7647) reviews (4369) software engineer (1972) web log (58) jaden (9) dan hersam (2) funny lists (2)
If you’re using docker with ufw (Ubuntu Firewall), your local ports may be exposed to the outside world. I recently read about this issue and when I checked, sure enough, the local ports of all of my docker containers were readily accessible.
It felt like being caught with my fly down. Why in the world docker does this by default is beyond me. And it’s not as if they’re not aware of it. This GitHub issue clearly lays out the problem. It’s disappointing the issue has existed for so long and the Docker team isn’t willing to fix it. It’s a major violation of the secure by default principle.
If you too are learning about this, here’s the fix.