51–60 of 68 posts
Another suggestion might be Minecraft. My nephews have casually said they'd like their own server.
Earlier quoted context omitted.
> sharing the kernel or are users placed inside separate VMs? The isolation is with users and SELinux. There are no VMs as those are pretty heavy. > the pricing is only listed as monthly. Is there more granular pricing? Pricing is with hourly granularity, but shown as monthly for simplicity. > What about storage/disk/volume encryption? We run only bare-metal servers, so this is less of a concern unless you expect the…
>> What about storage/disk/volume encryption? > We run only bare-metal servers, so this is less of a concern unless you expect the whole server to be stolen. Data still needs to be accessible all the time. So, when I delete a file and it is marked as deleted in the file system and it becomes empty space, then when this same space gets allocated for someone else, they can just read my file from the allocated empty spa…
This would be an issue if we would offer access to block devices. That’s not the case. The pod can only see the files and not read at the block level. Else every shared hosting setup would have this issue.
I’ll still look into it and see if there is any action needed. And the potential overhead for encrypting only the mounted user files. My feeling is that it’s pretty doable.
Sounds a lot like sandcats (/sandstorm), albeit slightly less ambitious?
It'd be cool to see a service like PikaPods built around Sandstorm as the platform layer, but there's a LOT of work to do to make Sandstorm a good idea to run commercially, and since we aren't running it as such, nobody's really working on those things.
Earlier quoted context omitted.
Sandstorm uses Vagrant as part of the app packaging (for developers) process. It is _not_ used in everyday use of Sandstorm. Instead, "Sandstorm implements fine-grained containers"[1], not VMs. 1: https://docs.sandstorm.io/en/latest/using/security-practices...
I see. So it’s like Docker, but their own implementation? Can’t wrap my head around it right now.
One of the biggest things is that Sandstorm prefers to sandbox individual documents versus applications, which mitigates a huge variety of security flaws in apps. In most cases vulnerabilities in apps on Sandstorm are not exploitable when run on Sandstorm.
It also manages most authentication and authorization roles for apps in an integrated way, which requires more integration work than just spinning up a Docker container.
Feel free to hit me up if you want to know more, though it would be a lot of work to make Sandstorm work for your business model at this point. It's cool seeing others in the "make open source web apps user-friendly to run" space though.
Earlier quoted context omitted.
Sandstorm uses Vagrant as part of the app packaging (for developers) process. It is _not_ used in everyday use of Sandstorm. Instead, "Sandstorm implements fine-grained containers"[1], not VMs. 1: https://docs.sandstorm.io/en/latest/using/security-practices...
I see. So it’s like Docker, but their own implementation? Can’t wrap my head around it right now.
Sounds a lot like sandcats (/sandstorm), albeit slightly less ambitious?
Would a Plex pikapod make sense? I'd worry about bandwidth costs. I ask because a buddy was saying he wanted his own Plex instance, but doesn't have the inclination or time to figure out the hardware. Another suggestion might be Minecraft. My nephews have casually said they'd like their own server.
Earlier quoted context omitted.
I see. So it’s like Docker, but their own implementation? Can’t wrap my head around it right now.
See also this blog post: https://sandstorm.io/news/2014-08-19-why-not-run-docker-apps
I do want to point out that this is from 2014 and we don't use Docker at PikaPods. We use Red Hat's stack, which integrates better with other Linux tools, like SELinux and Systemd.