Just one padlock is enough, but you can use up to 6.

You need all the locks removed before it’ll open, so you don’t need to count on someone to carefully count everyone back in. You just make sure that each person uses their own lock

No British show is going to discuss a marijuana habit, that’s very much an American word. It’s called cannabis

I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.

As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with

I’m pretty sure comments get sent back to your instance, so comments from instance B will work just fine.

I have no idea whether instance B will propogate things which have been federated to it though.

It’s also not obvious that an instance you’re not federated with can’t do their half of the federating, if they’re so inclined, and show content from instances which choose to defederate. At the end of the day you’d have to trust all involved to put in some effort to respect the decision to defederate

Podman supports docker compose just fine. You have to run it as a service, so that it can expose a socket like docker does, but it supports doing exactly that

Because a container is only as isolated from the host as you want it to be.

Suppose you run a container and mount the entire filesystem into it. If that container is running as root, it can then read and write anything it likes (including password databases and /etc/sudo)

Which is particularly surprising from a French company

That’s not fair. They’re complaining that they don’t like it, and that they want to be able to turn it off. They didn’t say it shouldn’t exist