Hmm, never looked at it this way. I might start using their images too.

Questions about the user:

1- Their docs says it may be risky to run the app as root. Is the root in the docker container same as root of the host? I thought it was root but only in the container, separate from the host root’s namespace.

2- And in terms of volume ownership: if I’m using Docker volumes instead of bind mounts, do I care about that? I haven’t had an issue so far.

I’ve always wondered that. Why use linux server’s images over official ones? Are they somehow better?

Is there a thing that can hook into my library and auto-generate playlists that also contain songs that aren’t there and/or recommend songs to me?

It’s piracy to use the app too. There’s no line between downloading through a third party app vs exporting those files for personal use.

Thanks, just to clarify, even if I deny all forwards on the host using UFW, that still won’t have an affect on Docker because Docker inserts its rules above UFW rules. Correct?

telling someone asking these questions to read up on networking is the same as telling someone who’s asking why they can’t fly in the air to “just” read up on physics

I’m just curious if I’m missing something and to learn the best practice as well as the reason why it’s the best practice.