Digital Freedom

1 readers

1 users here now

Governments, Big Business, & Tyrants are using technology to control and censor you. Here we discuss how to break free.

founded 2 years ago

MODERATORS

[email protected]

This reddit clone for Lemmy looks awesome. (github.com)

submitted 1 year ago by [email protected] to c/[email protected]

19 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago) (1 children)

Small correction. You aren't actually running the latest from github. You are running the latest from his docker hub. What ever the latest image he built and uploaded to ghcr.io/rystaf/mlmym

If you want to run this locally without docker you can do it by installing git and golang.

git clone https://github.com/rystaf/mlmym.git;
cd mlmym;
go build;
LEMMY_DOMAIN='lemmydomain.com' ./mlmym --addr  "0.0.0.0:8080"

You should be able to build it with docker too if you didn't want to install a go compiler.

git clone https://github.com/rystaf/mlmym.git;
cd mlmym;
docker build -t mlmym . ;
docker run -it -e LEMMY_DOMAIN='lemmydomain.com' -p "8080:8080" mlmym;

You never really know what is running on someone's docker repository to be honest. They could have compiled in a crypto miner into the executable for all we know. Even though they most likely did not.

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago) (1 children)

Ah, thank you! I've edited my comment to make sure that if someone else reads what I wrote, they see your reply too.

I was trying to help others, but now I'm the confused one that needs help.

I was looking at the site ghcr.io, and my impression is that this site is similar to dockerhub but run by github, and I (perhaps wrongly) assumed that it guarantees that the container is built from the source that is accessible through the github repository.

This puts me in the uncomfortable situation that my comment could misguide someone when my intention is to help, but I hope that with the help of your comment and the edit it is enough to avoid that.

[–] [email protected] 2 points 1 year ago (1 children)

I was looking at the site ghcr.io, and my impression is that this site is similar to dockerhub but run by github, and I (perhaps wrongly) assumed that it guarantees that the container is built from the source that is accessible through the github repository.

I'm actually not sure if github has a auto build system. It might somewhere. But he should be able to override it with a

docker push ghcr.io/OWNER/IMAGE_NAME:VERSION

Maybe there are some safeguards in github somewhere I don't know about.

[–] [email protected] 2 points 1 year ago

Maybe there are some safeguards in github somewhere I don’t know about.

I don't know either, as I haven't published my own docker containers via dockerhub nor this github site. So I've edited my comment even more to warn people of this potential risk. Thank you!