[t-writescode]

The AIO solution creates several docker containers that all get updated through their assisted update process. In general, I've been quite happy with it, myself. I have it running on my Unraid machine. The only problem I have intermittently is when Unraid seems to rename container names in special circumstances. I have to go and recreate the aio container. Otherwise, it's been very smooth sailing for me; and, the AIO solution definitely runs faster than my original single Docker container solution.

[apitman]

So you pass in the docker socket and the AIO container runs docker commands on the host?

[t-writescode]

That is correct, yes.

[teekert]

It sounds a bit like using the same password for all your services... Hack a Nextcloud instance, gain root on any system through Docker,

[apitman]

I would assume (hope) that the AIO container itself is not exposed to the internet, only some of the containers it starts.