Re: sslmode - detecting local docker - Mailing list pgsql-admin

From Roland Müller
Subject Re: sslmode - detecting local docker
Date
Msg-id CA+8p0G2gDTZTqAV6d-5oEVc7i-ZgASqCCPWXUH+2CocVTLY=Ug@mail.gmail.com
Whole thread
In response to sslmode - detecting local docker  (AJ Weber <aweber@comcast.net>)
List pgsql-admin
With docker or podman you can list the networks and inspect them one by one to get their subnets. This information could then be used in pg_hba.conf.

E.g. using podman , docker should be the same except name of the command:

$ podman network ls
NETWORK ID    NAME        DRIVER
2f259bab93aa  podman      bridge
$podman inspect  2f259bab93aa
...
          "subnets": [
               {
                    "subnet": "SOME_IP_NET/SOME_MASK",
                    "gateway": "SOME_IP_ADDR"
               }
          ],
...

Am Mo., 13. Apr. 2026 um 16:09 Uhr schrieb AJ Weber <aweber@comcast.net>:
I'm trying to configure my custom JDBC connection to be as safe as
practical.

Years gone by, I would simply check if the URL (configured-property) had
"localhost" in it, and do nothing. Recently I decided I'd check for
localhost AND see if any "ssl" was explicitly already set in the URL. 
If not, I tried adding ssl=true as a connection param.  This fails when
using a postgresql docker container, because they typically are not
configured for SSL, but the hostname is also not "localhost".

Besides changing my logic to add "sslmode=prefer" (instead of "true",
which may be the default anyway), does anyone have a good way to
determine if the JDBC URL is actually a docker container running on the
same host?

Currently running v16.x, but these modes haven't changed in a long time,
so I suppose this question applies across currently supported versions.

Thanks in advance,

AJ



pgsql-admin by date:

Previous
From: Laurenz Albe
Date:
Subject: Re: Slowness
Next
From: OMPRAKASH SAHU
Date:
Subject: performance issue with a PL/pgSQL function