Protecting The Wire – Semaphore Behind SSL Proxy

Mission Brief

Plain text communication is loud. It’s bleeding data.
Prying eyes can see every bit in the wire.

You have to isolate the backend – the Semaphore UI and MySQL containers stay locked down. Unreachable for the external work.
Open a tiny hole on the stronghold to the world – the frontend is an NginX SSL proxy.

You use:

  • Podman pod for network and container isolation
  • The Semaphore and MySQL containers without exposing them to the world
  • An NginX proxy container with SSL
Continue reading “Protecting The Wire – Semaphore Behind SSL Proxy”

Building a Segmented, Secure Multi-Container Application with Podman

By DeadSwitch | The Cyber Ghost
“In silence, we rise. In the switch, we fade.”


Modern web applications are never just one service.
They’re a fortress of moving parts – and every connection is a potential attack surface.
If you’re still putting the entire stack into one fat container…
You’re building your future breach.

Continue reading “Building a Segmented, Secure Multi-Container Application with Podman”

Enhancing Security with Rootless Containers in Podman

In the evolving landscape of containerization, security remains a paramount concern. Podman, a daemonless container engine, offers a robust solution through its support for rootless containers. This article delves into the security benefits of using rootless containers with Podman, highlighting why it is a preferred choice for many developers and system administrators.

Continue reading “Enhancing Security with Rootless Containers in Podman”

Podman Basics 09: Kubernetes Compatibility

Podman’s integration with Kubernetes through the podman kube play command allows users to create pods, containers, and volumes from Kubernetes YAML files. This command reads the structured file and recreates the described resources, starting the containers within a pod and outputting the ID of the new pod or the name of the new volume.

Continue reading “Podman Basics 09: Kubernetes Compatibility”

Podman Basics 08: Building Your Own Images

Sometimes you must create your own Podman images. Building your own Podman images allows for greater customization, control, consistency, and organizational efficiency compared to using only public images. The investment upfront can pay dividends in the long run through improved security, consistency, and maintainability of your container infrastructure.

Continue reading “Podman Basics 08: Building Your Own Images”

Podman Basics 07: Using Multi-Container Applications

Podman-compose is a script that simplifies the use of Podman to manage multi-container setups. It interprets the docker-compose.yml file and creates a Podman-compatible setup. This means you can use your existing Docker Compose files with Podman, making the transition smoother if you’re moving from Docker to Podman.

Continue reading “Podman Basics 07: Using Multi-Container Applications”

Podman Basics 04: Running Your First Container

After installing Podman you have to know and understand some of the terminology. Understanding the basic jargon of containerization will help you start with this lesson, and it will be beneficial later on too. You will learn about the image registries, images and containers in this lesson. You will take a look at how to pull, run and manage them.

Continue reading “Podman Basics 04: Running Your First Container”

Podman Basics 03: Installing Podman

Containerization has changed the way we deploy and manage applications. Podman is a powerful container management tool that provides a seamless experience for running containers in production, development, and testing environments. We will walk through the steps to install Podman on three popular Linux distributions: Debian, Ubuntu, and Rocky Linux. This lesson will equip you with the knowledge to enjoy the power of Podman on your preferred platform.

Continue reading “Podman Basics 03: Installing Podman”

Podman Basics 02: Introduction to Podman

Podman, also known as the POD manager, is an open-source tool for developing, managing, and running containers on Linux systems. It was originally developed by Red Hat engineers along with the open-source community. Podman is designed to make it easy to find, run, build, share, and deploy applications using Open Containers Initiative (OCI) Containers and Container Images.

Continue reading “Podman Basics 02: Introduction to Podman”