Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Docker-phobia: Analyze Docker image size with a treemap

github.com

Post reply on HN
Print view View original

21–30 of 31 posts

Re: Show HN: Docker-phobia: Analyze Docker image size with a treemap

#21

Post by xmorse »

leetrout wrote: post #16
remorses wrote: post #13

Earlier quoted context omitted.

Goblin is a service that builds a go binary for your platform on the fly and downloads it in PATH. This is a much faster way than setting up Github Actions to build an executable for every possible platform on every release. You can also use go install if you know what you are doing.

> This is a much faster way than setting up Github Actions to build an executable for every possible platform on every release It's not even that hard. Just use GoReleaser. https://goreleaser.com/

And then later add a script that downloads the binary from Github releases. Doesn't improve the situation with curl script haters

Re: Show HN: Docker-phobia: Analyze Docker image size with a treemap

#22

Post by take-five »

mr_mitm wrote: post #15
Wingy wrote: post #5

Earlier quoted context omitted.

curl should probably scream when it detects piping unencrypted wan (not local ips) connections to shell, sort of like what openssh does when a host’s fingerprint changes

How could curl detect where it's piped to?

Something like (in Python)

os.isatty(sys.stdout.fileno())

Re: Show HN: Docker-phobia: Analyze Docker image size with a treemap

#23

Post by KronisLV »

xmorse wrote: post #21
leetrout wrote: post #16

Earlier quoted context omitted.

> This is a much faster way than setting up Github Actions to build an executable for every possible platform on every release It's not even that hard. Just use GoReleaser. https://goreleaser.com/

And then later add a script that downloads the binary from Github releases. Doesn't improve the situation with curl script haters

I feel like the assumption is that GitHub would be more proactive about stopping malware being distributed from their platform.

Re: Show HN: Docker-phobia: Analyze Docker image size with a treemap

#24

Post by Zambyte »

take-five wrote: post #22
mr_mitm wrote: post #15

Earlier quoted context omitted.

How could curl detect where it's piped to?

Something like (in Python) os.isatty(sys.stdout.fileno())

That doesn't say where it's piped though. It could be redirected to a file, or piped to something harmless like jq.

Re: Show HN: Docker-phobia: Analyze Docker image size with a treemap

#25

Post by msm_ »

_joel wrote: post #11
akshat2602 wrote: post #10

Earlier quoted context omitted.

Looks like goblin.run is a project that lets you install golang projects without having golang installed. OP should probably preface the installation script with this.

or just use, I don't know, docker?

Aren't go binaries statically compiled? Why is anything other than a static binary download and `chmod +x` even needed?

Re: Show HN: Docker-phobia: Analyze Docker image size with a treemap

#26

Post by _joel »

msm_ wrote: post #25
_joel wrote: post #11

Earlier quoted context omitted.

or just use, I don't know, docker?

Aren't go binaries statically compiled? Why is anything other than a static binary download and `chmod +x` even needed?

sure, for each arch.. or just use the thing that the tool is designed for as the distribution mechanism. A `docker run ...` is one step, not the two you're advocating.

Re: Show HN: Docker-phobia: Analyze Docker image size with a treemap

#27

Post by timando »

mr_mitm wrote: post #15
Wingy wrote: post #5

Earlier quoted context omitted.

curl should probably scream when it detects piping unencrypted wan (not local ips) connections to shell, sort of like what openssh does when a host’s fingerprint changes

How could curl detect where it's piped to?

Iterate through /proc//fd and check for the pipe id in the symlink target.

Re: Show HN: Docker-phobia: Analyze Docker image size with a treemap

#29

Post by selcuka »

_joel wrote: post #11
akshat2602 wrote: post #10

Earlier quoted context omitted.

Looks like goblin.run is a project that lets you install golang projects without having golang installed. OP should probably preface the installation script with this.

or just use, I don't know, docker?

> or just use, I don't know, docker?

The author is apparently afraid of docker, hence Docker-phobia.

Post reply on HN