The sad state of sysadmin in the age of containers (2015)
1–10 of 435 posts
Re: The sad state of sysadmin in the age of containers (2015)
#2The rantiness and constant NSA references obscure some really good points.
Re: The sad state of sysadmin in the age of containers (2015)
#3> And since nobody is still able to compile things from scratch, everybody just downloads precompiled binaries from random websites. Often without any authentication or signature.
Apache has official mirrors that host repo files for various package managers so you can install using apt-get or whatever it is that replaced yum (dnf? dnf):
https://www.apache.org/dyn/closer.lua/bigtop/bigtop-1.2.1/re...
So precompiled binaries from official sources are certainly available.
Re: The sad state of sysadmin in the age of containers (2015)
#4I want a prediction market to offer bets on which big company is affected by the breach that starts the reckoning.
Re: The sad state of sysadmin in the age of containers (2015)
#5> None of these "fancy" tools still builds by a traditional make command.
Is there anything more "get-off-my-lawn" than "These tools don't use the thing I like!"
Re: The sad state of sysadmin in the age of containers (2015)
#6TL;DR version:
"No one cares about verifiable security anymore."
The author defines a category of people and then attacks it for A) not verifying the integrity of its systems, and B) not doing things with make.
A is valid and something that needs attention. B is missing the point.
Re: The sad state of sysadmin in the age of containers (2015)
#7Ugh make files. Kill me. Give me a bash script or give me death.
Re: The sad state of sysadmin in the age of containers (2015)
#8> And since nobody is still able to compile things from scratch, everybody just downloads precompiled binaries from random websites. Often without any authentication or signature. Apache has official mirrors that host repo files for various package managers so you can install using apt-get or whatever it is that replaced yum (dnf? dnf): https://www.apache.org/dyn/closer.lua/bigtop/bigtop-1.2.1/re... So precompiled bi…
I think the author's point was this:
"Unless you compile it yourself, you can't trust it."
Re: The sad state of sysadmin in the age of containers (2015)
#9Reproducible build tools are a thing. Try Nix sometime. nixpkgs has, say, Hadoop. nixpkgs can make Docker containers too.
Re: The sad state of sysadmin in the age of containers (2015)
#10> None of these "fancy" tools still builds by a traditional make command. Is there anything more "get-off-my-lawn" than "These tools don't use the thing I like!"
In reality it's all peachy until stuff doesn't work and no one knows why, or how to investigate an issue or remotely where to begin to troubleshoot it. Change and evolution is good, but I think there is still a lot to be said about knowing the basics to anything. Levels of abstractions eventually hurt more than it helps.