101–110 of 203 posts
Earlier quoted context omitted.
I've no idea why you wouldn't use Ubuntu which is only around 40mb, has a sane package manager and a standard glibc.
Ubuntu is 40MB but if you add a few packages with tons of dependencies it can quickly reach 800MB. Alpine has much more reasonable dependency trees.
Earlier quoted context omitted.
My inability to personally audit systemd would be at the top of the list.
Why would anyone run an init system inside a container? Just run the process. Let whatever is managing your container restart it if the process quits, be it docker or K8s.
[Edit - fix link]
Earlier quoted context omitted.
My inability to personally audit systemd would be at the top of the list.
Why would anyone run an init system inside a container? Just run the process. Let whatever is managing your container restart it if the process quits, be it docker or K8s.
There's plenty of other reasons.
Earlier quoted context omitted.
For anyone who want a small image but with glibc, https://github.com/GoogleContainerTools/distroless is a good choice, especially if you are writing in static linked language e.g. Go and Rust.
For Python I'd also highly recommend Clear Linux for raw performance. It's not quite as easy to get started as with something like Ubuntu though.
https://github.com/clearlinux/dockerfiles/tree/master/python
Earlier quoted context omitted.
Please don't do this anymore. End-to-end encryption is extremely easy to set up and maintain. P2PE will absolutely lull you into a false sense of security.
Everyone seems to think E2E encryption is needed everywhere (I know because the security guys at work think it is needed everywhere, even for everything inside a VPC), but even AWS here is advertising the fact that you don't need to do this: https://aws.amazon.com/blogs/aws/new-tls-termination-for-net... >Today we are simplifying the process of building secure web applications by giving you the ability to make use of…
Earlier quoted context omitted.
Please don't do this anymore. End-to-end encryption is extremely easy to set up and maintain. P2PE will absolutely lull you into a false sense of security.
Everyone seems to think E2E encryption is needed everywhere (I know because the security guys at work think it is needed everywhere, even for everything inside a VPC), but even AWS here is advertising the fact that you don't need to do this: https://aws.amazon.com/blogs/aws/new-tls-termination-for-net... >Today we are simplifying the process of building secure web applications by giving you the ability to make use of…
Earlier quoted context omitted.
Unless you're behind a load balancer which terminates TLS and the traffic you deal with is purely http.
Please don't do this anymore. End-to-end encryption is extremely easy to set up and maintain. P2PE will absolutely lull you into a false sense of security.