I’m going to be running a Jellyfin server, and I don’t want to maintain it a lot, I just want it to work. Would using Docker be the easier way to maintain Jellyfin, or would using Podman be better? (I don’t want to deal with SELinux, firewalls, port forwarding, etc.)

  • vojel@feddit.de
    link
    fedilink
    English
    arrow-up
    6
    ·
    11 months ago

    SELinux should not be an issue if you stick to common directories and use :Z flag after the mount path with docker, afaik podman uses the same mechanism. There’s even a tool for selinux container policies: https://github.com/containers/udica

    Regarding firewall stuff, disable it on your machine and you are fine. Port forwarding in containers is necessary to connect to services, now way around.

    Ah and read this: https://stopdisablingselinux.com/

    It has a reason why it exists.

    • farcaller@fstab.sh
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 months ago

      Regarding firewall stuff, disable it on your machine and you are fine.

      How do you know OP doesn’t have a bunch of unsecured services sticking out into their LAN ready to be a target for the next cryptolocking scam?

      Slightly sarcastic, but yeah, OP, do not just turn your firewall without understanding pros and cons of doing such. At the very least, see what your server exposes to the network (ss -tunlp will give you a good starting point), and see if there’s nothing unexpected in there that might be abused.

      • vojel@feddit.de
        link
        fedilink
        English
        arrow-up
        1
        ·
        11 months ago

        I don’t but lots of people stick anyways to a single network with some kind of crappy router and from OPs post I assumed that OP doesn’t really care about security, see SELinux