this post was submitted on 24 Jan 2024
127 points (94.4% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
54500 readers
496 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
Ko-fi | Liberapay |
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Forgive my ignorance, but doesn't the mullvad need to run through gluetun, or at least in its own docker container to be secure?
Or to put it another way, whats the benefit/cost of installing it via dpkg as opposed to running it in a container, as opposed to running it in in gluetun (in a container)?
i thought everything was supposed to run in a container if it's touching the web
Your question touches on some advanced concepts in networking and system security, specifically around the use of VPNs and Docker containers. Let's break down the differences and implications of running Mullvad VPN through various methods:
Mullvad via DPKG Installation (Direct Install on OS):
Mullvad in a Docker Container:
Mullvad with Gluetun (VPN in a Container):
In essence, the choice depends on your technical expertise, specific needs, and the level of security and flexibility you desire:
The idea that "everything touching the web should run in a container" is more of a best practice in professional IT environments, especially for server deployments, rather than a strict rule for personal use. It offers advantages in security and manageability but comes with a learning curve and complexity that might not be necessary for simpler or personal setups.
Thank you - that is helpful.
So the Gluetun part is really only for if I want to get into my jellyfin when away from home?