Great question. I tried to very briefly touch on it in the post. The bottom line is that its benefits are there mostly for rootless podman, which I've chosen not to implement here (yet). You can also configure it so that the socket is always active and that will then trigger the service associated with it, so that you save on resources when the service isn't needed. However, I didn't want to do that as it would likely increase page load time for readers.
- Posts
- 15
- Comments
- 94
- Joined
- 3 yr. ago
- Posts
- 15
- Comments
- 94
- Joined
- 3 yr. ago
Realized I didn't answer the last question here on hardening. The answer is sure! I don't have much planned for the blog, as I was just thinking I'd take "public notes" for my tinkerings as they came. I've done linux administration for a long time though so I'd be happy to put together a post on baselines and hardening