Interesting Snippets from 2025-03-25

• GitHub - 11notes/docker-socket-proxy: Access your docker socket safely as read-only, rootless and distroless

  What can I do with this? This image will run a proxy to access your docker socket as read-only. The exposed proxy socket is run as 1000:1000, not as root, although the image starts the proxy process as root to interact with the actual docker socket. There is also a TCP endpoint started at 2375 that will also proxy to the actual docker socket if needed. It is not exposed by default and must be exposed via using - "2375:2375/tcp" in your compose.

[/snippets] permanent link