Viewing profile — janjongboom

https://arstechnica.com/gadgets/2025/10/arduino-retains-its-... https://www.electronicdesign.com/technologies/embedded/artic...

This false sense of reproducability is why I funded https://docs.stablebuild.com/ some years ago. It lets you pin stuff in dockerfiles that are normally unpinnable like OS package …

Still gonna break everyone’s CI until they manually update the tag. (And who guarantees that these tags will stay alive after they pull this)

The removal (or moving) of the Bitnami images from Docker Hub is going to break a ton of systems that depend on them. I helped set up https://www.stablebuild.com/ some years ago to…

Seconding this - absolutely terrific content.

FYI, I've helped set up StableBuild ( https://www.stablebuild.com ) to help pin stuff in Docker that's normally virtually impossible to pin (e.g. OS package repos, Docker base imag…

Not never. E.g. all the capital we as founders put in the business before we raised our seed round was converted into Series Seed Preferred shares at the same rights as angels / se…

Packages and versions can be deleted from PyPI, which can be a massive pain in the ass for anyone consuming these packages. Can have your whole Python dependency tree pinned => aut…

I’m an investor in StableBuild.

Yes, fantastic work. Downside is that snapshot.debian.org is extremely slow, times out / errors out regularly - very annoying. See also e.g. https://github.com/spesmilo/electrum/is…

> Any source of that claim? Any tag like ubuntu:20.04 -> this tag gets overwritten every time there's a new release (which is very often) https://hub.docker.com/r/nvidia/cuda -> th…

Yeah, very similar approach. We did this before, see e.g. https://www.stablebuild.com/blog/create-a-historic-ubuntu-pa... - but then figured everyone needs exactly the same package…

Until someone overwrites or deletes the Docker base image (regularly happens), or when you depend on some packages installed through apt - as you'll get the latest version (impossi…

Yeah, but it's impossible to properly pin w/o running your own mirrors. Anything you install via apt is unpinnable, as old versions get removed when a new version is released; pinn…

Ah, yes, on mobile it shows the wrong pricing table... Copying here while I get it fixed: Free => Access to all functionality, 1 user, 15GB traffic/month, 1GB of storage for files/…

Apologies for editorializing the title a bit :-) Reading through the comments in https://news.ycombinator.com/item?id=39720007 I saw a common misconception pop up again: Dockerfile…

And that assumes that `foo` and `bar` are not overwritten or deleted in your package repository, and that the git repository remains available.

That's the interesting bit about Dockerfiles. They look _looks_ deterministic, and they even are for a while while you're looking at it as a developer. I've done a detailed writeup…

I've gone down the same path. I love deterministic builds, and I think Docker's biggest fault is that to the average developer a Dockerfile _looks_ deterministic - and it even is f…

Not sure about Earthly as I’ve never used it, but for Nexus and other artifactory solutions around package repos: 1. Don’t need to set up anything. No need to set up an apt repo an…

Hi HN! I've posted this a few weeks back without much HN traction - today we've added a free community tier, so anyone can try it out. TL;DR: We’ve launched StableBuild, a new tool…

Hi HN! TL;DR: We’ve launched StableBuild, a new tool to easily freeze and pin Docker images, operating system packages, Python packages, and arbitrary build dependencies; in 5 line…