• 0 Posts
  • 44 Comments
Joined 2 years ago
cake
Cake day: June 19th, 2023

help-circle

  • With rootless containers, even root in the container is basically useless anyway because it truly runs as a fake ID on the host.

    I’ve seen this repeated a lot, but I’m not really convinced running as root inside containers is a good/safe thing to do. User namespaces can provide some protection for the host, but that does nothing for the rest of the files inside the guest. For example, consider a server software with an arbitrary file write vulnerability. If the process is running as a low privilege user, exploiting the vulnerability might not really get you anywhere. If it’s running as root, it’s basically a free pass to root privilege and arbitrary code execution within the container.
















  • dack@lemmy.worldto3DPrinting@lemmy.worldModernizing an Ender 3
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 years ago

    The architecture is a bit different than octoprint. Fluidd and mainsail are purely client side UI’s, while Moonraker provides the server side API for them to connect to. So any additional functionality would need to integrate with Moonraker - not Fluidd/Mainsail.

    A lot of functionality that is plugin based in octoprint is core to Moonraker and fluidd/mainsail. Things like cameras, mesh bed tools, gcode viewer, UI layout customization, power device control, etc are all included.

    Spool manager is not something I’ve personally needed or used, but this would probably be a good option: https://github.com/Donkie/Spoolman