Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Docker is deleting Open Source organisations - what you need to know

blog.alexellis.io

Post reply on HN
Print view View original

341–350 of 764 posts

Re: Docker is deleting Open Source organisations - what you need to know

#341

Post by jacooper »

indymike wrote: post #318
jacooper wrote: post #232

Earlier quoted context omitted.

Podman-compose isn't fully compatible with the new compose spec. Also I really don't care if docker has a daemon or not, for me it offers feature like auto starting containers without bothering with SystemD, and auto updates using watchtower and the docker socket. And since podman doesn't have an official distro package repo like docker, you are stuck use whatever old version shipped in your distro without recent imp…

> And since podman doesn't have an official repo like docker, Hmm... https://github.com/containers/podman I found that on: https://podman.io/ so, I'm pretty sure it's official.

I meant a a repo for a distro package manager, so you can get the latest version regardless of whatever version your distro ships.

Re: Docker is deleting Open Source organisations - what you need to know

#342

Post by politician »

nine_k wrote: post #254
richardwhiuk wrote: post #234

Earlier quoted context omitted.

You should be escrowing any Docker images you depend on, I'd have thought.

Good thing is that setting up an image registry in AWS is so simple! (Ha-ha, only serious.)

It's strikingly trivial to self-host docker images in AWS ECR and to run your own CICD platform with safe deployments using EC2, the AWS SDK and the Docker SDK. A super basic process that monitors one GitHub repo is ~150 LOC.

EDIT: I just confirmed that GPT-4 can write this program. Have fun!

Re: Docker is deleting Open Source organisations - what you need to know

#343

Post by striking »

boredumb wrote: post #291
darkwater wrote: post #229

Earlier quoted context omitted.

> [1] https://daniel.haxx.se/blog/2021/02/19/i-will-slaughter-you/ Wow that's clearly someone with serious mental issues :( I hope he could find some help for his condition.

In the pdf there's mention to terry davis so I'm tempted to think this is actually a bit of a troll.

That PDF links to https://web.archive.org/web/20210223111850/https://www.nerve.... Would be quite the troll to go to the effort of buying a domain just to mess with an open source author.

Re: Docker is deleting Open Source organisations - what you need to know

#344

Post by paxys »

jmac01 wrote: post #325

I havent used docker but my understanding is that dockerhub hosts docker images which are essentially just text files? Would that be something that cud just be migrated to another platform easily or does dockerhub do a lot of other things too?

Dockerfiles are text files. Docker images are entire OS file system snapshots (not exactly but close enough) built from those Dockerfiles. A single one can be hundreds of MBs or even multiple GBs in size.

Re: Docker is deleting Open Source organisations - what you need to know

#345

Post by AlotOfReading »

hospitalJail wrote: post #157
JonChesterfield wrote: post #52

My first thought on this was good riddance. The dev model of "we've lost track of our dependencies so ship Ubuntu and a load of state" never sat well. However it looks like the main effect is going to be moving more of open source onto GitHub, aka under Microsoft's control, and the level of faith people have in Microsoft not destroying their competitor for profit is surreal.

>The dev model of "we've lost track of our dependencies so ship Ubuntu and a load of state" never sat well. This was my first thought when I learned of Docker. I have a hard time calling myself an 'Engineer' when there are so many unknowns, that I'm merely playing around until something works. I insist on being called a Programmer. It pays better than 'real' engineering. Why not embrace it? (Credit toward safety crit…

As someone that does what you consider "engineering", my current project is containerized because I've lost too much of my life to debugging broken dev environments. The person who ships safety critical releases at most companies isn't a developer that's deeply familiar with the code, it's usually a distracted test engineer with other things to do that may not be very tech-saavy. Anything I can do to help them get a reproducible environment is great.

Re: Docker is deleting Open Source organisations - what you need to know

#346

Post by vorpalhex »

IncRnd wrote: post #278
vorpalhex wrote: post #209

Earlier quoted context omitted.

> Open source was invented by big co as a "marginalized your complement" strategy, not the ideal that is marketed as. > In 1983, Richard Stallman launched the GNU Project to write a complete operating system free from constraints on use of its source code. Particular incidents that motivated this include a case where an annoying printer couldn't be fixed because the source code was withheld from users. from https://e…

From your very link, 1983's GNU Project was not the first piece of Open Source software. From your link: The first example of free and open-source software is believed to be the A-2 system, developed at the UNIVAC division of Remington Rand in 1953

> Software was not considered copyrightable before the 1974 US Commission on New Technological Uses of Copyrighted Works (CONTU) decided that "computer programs, to the extent that they embody an author's original creation, are proper subject matter of copyright"

FOSS before 1974 looks.. funny. It existed! But it did not look like the modern FOSS movement.

Even post 1974 and pre-GNU, FOSS-ish text editors and such existed. This was still the era when licenses were often non-standard and frequently did not exist. Handing your friend a copy of a program was the norm, regardless the actual legal situation (which itself was probably vague and unspecified).

Re: Docker is deleting Open Source organisations - what you need to know

#347

Post by account42 »

ohgodplsno wrote: post #252
bushbaba wrote: post #246

Earlier quoted context omitted.

That’s unplanned work. There’s other work needing to be done as well.

And a sudden fire is also unplanned work, but that's still your work. If this is such a threat, then maybe shift priorities around.

In this case it is entirely planned work: Anyone depending on docker.io chose to make their processes dependent on online endpoints with whose operators you have no business relationship. An unpaid third-party service going offline should be far from unexpected and if you rely on it you better be ready to cope without notice.

This is like complaining that you have to put out a fire because rather than fixing the sparking cables you have been relying on your neighbor to put them out before the become noticeable and he only gave you a short notice that he'd be going on vacation.

Re: Docker is deleting Open Source organisations - what you need to know

#348

Post by BlueTemplar »

davedx wrote: post #38
FlyingSnake wrote: post #31

> Start publishing images to GitHub And when GitHub starts similar shenanigans, move out to where? I am old enough to know the we can't trust BigTech and their unpredictable behaviors. Eventually we need to start a Codeberg like alternative using Prototype funds to be self reliant. 1: https://codeberg.org/ 2: https://prototypefund.de/

It actually sounds reasonable to me? They have an open source program, the article says its open source definition is "too strict" because it says you must have "no pathway to commercialization". I mean why should you expect someone to host gigabytes of docker images for you, for free?

Somewhat related : what is Docker's stance on the licenses that fail the first Open Souce test, those that forbid commercial use (NC) ?

Re: Docker is deleting Open Source organisations - what you need to know

#349

Post by kevincox »

tolmasky wrote: post #214

Could IPFS possibly be a good distributed (and free?) storage backing for whatever replaces DockerHub for Open Source, as opposed to using something like GitHub? We'd still need a registry for mapping the image name to CID, along with users/teams/etc., but that simple database should be much cheaper to run than actually handling the actual storage of images and the bandwidth for downloading images.

Probably. You still need to store and serve the data somewhere of course but for even moderately successful open source organizations they will likely find volunteer mirrors. The nice thing about IPFS is that new people can start mirroring content without any risk or involvement, new mirrors are auto-discovered, like bittorrent.

It seems like the docker registry format isn't completely static so I don't think you can just use a regular HTTP gateway to access but there is https://github.com/ipdr/ipdr which seems to be a docker registry built on IPFS.

> We'd still need a registry for mapping the image name to CID, along with users/teams/etc.

IPNS is fairly good for this. You can use a signing key to get a stable ID for your images or if you want a short memorable URL you can publish a DNS record and get /ipns/docker.you.example/.

Of course now you have pushed responsibility of access control to your DNS or by who has access to the signing key.

Re: Docker is deleting Open Source organisations - what you need to know

#350

Post by KingLancelot »

dbingham wrote: post #230

As an SRE Manager, this is causing me a hell of a headache this morning. In 30 days a bunch of images we depend on may just disappear. We mostly depend on images from relatively large organizations (`alpine`, `node`, `golang`, etc), so one would want to believe that we'll be fine - they're all either in the open source program or will pay. But I can't hang my hat on that. If those images disappear, we lose the abilit…

[dead]
Post reply on HN