Post #1028730

So Nextcloud now recommends to run Nextcloud with their "all-in-one" Docker container instead of multiple containers for db, webserver and redis. The all-in-one compose file mounts the docker socket into the container which basically gives the container full root access to the host. The read only flag does not help here. As if it was not bad enough to host millions of lines of php this is awful.