Nothing too shabby, but still. To run it you need docker, and after that just type
docker run -it --rm --log-driver none --read-only --net none --cap-drop=ALL --security-opt=no-new-privileges defnotgustavom/pixfire4
…and you will be greeted with a little, small, very pixelated bonfire.
“Why docker and not just a simple command?”
Mostly because of those two flags: --read-only
and --net none
. Can’t get better than this. :^)
This also came up while in a self-learning process, but I don’t want to “flex” it here.
I’ll try that, I also read around that I could increase my UID namespace range (not that I understand what it means 🫣), so I’ll try that too
Edit: Now I half understand after reading these:
https://github.com/containers/podman/issues/12715
https://docs.podman.io/en/latest/markdown/podman.1.html#rootless-mode
3.https://github.com/containers/podman/blob/main/docs/tutorials/rootless_tutorial.md#etcsubuid-and-etcsubgid-configuration
4.https://opensource.com/article/19/2/how-does-rootless-podman-work