# dind: Docker in Docker

Neko rooms manages neko containers in docker and routes them using traefik. This is whole implementation put inside docker, that runs in docker. It is additional layer of security, but still not perfect (because dind requires `--privileged`).

This overhead of putting docker in docker can have negative impact on the usability, therefore users are encouraged to **not deploy neko-rooms using dind** method.

However, there are some usecases, when this might come in handy:
 - just testing out neko-rooms
 - absolutely needed additional security layer
 - developing neko-rooms

## Pull images

In order to pull new images run:

```sh
docker-compose exec neko-rooms docker pull ghcr.io/m1k1o/neko/chromium
```