Is there any reason to use "real containers" such as Docker instead of just
systemd-nspawn -D /path/to/some/linuxsystem
?
>>107711761
Nobody needs ufw anywhere.
>>107711941
So you just want to make your system unresponsive to pings and basically have all that "desktop ruleset" junk? There are plenty of NFtables examples out there.