Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Docker is deleting Open Source organisations - what you need to know

blog.alexellis.io

Post reply on HN
Print view View original

451–460 of 764 posts

Re: Docker is deleting Open Source organisations - what you need to know

#451

Post by 0xDEF »

hospitalJail wrote: post #157
JonChesterfield wrote: post #52

My first thought on this was good riddance. The dev model of "we've lost track of our dependencies so ship Ubuntu and a load of state" never sat well. However it looks like the main effect is going to be moving more of open source onto GitHub, aka under Microsoft's control, and the level of faith people have in Microsoft not destroying their competitor for profit is surreal.

>The dev model of "we've lost track of our dependencies so ship Ubuntu and a load of state" never sat well. This was my first thought when I learned of Docker. I have a hard time calling myself an 'Engineer' when there are so many unknowns, that I'm merely playing around until something works. I insist on being called a Programmer. It pays better than 'real' engineering. Why not embrace it? (Credit toward safety crit…

I doubt the real™ engineers at NASA and SpaceX know everything their proprietary closed-source Matlab-to-FPGA tooling is actually doing under the hood.

Re: Docker is deleting Open Source organisations - what you need to know

#452

Post by jhoelzel »

Please dont forget that you can cache all these images in your own registry! you will still have to worry about how to get updates, but set up a private registry and deal with this on your on time!

As a side node, Rancher desktop is good enough. Docker has repeatedly demonstrated that they just where the first ones and not by any means the best ones.

Re: Docker is deleting Open Source organisations - what you need to know

#453

Post by wlesieutre »

mc4ndr3 wrote: post #414
aprdm wrote: post #330

Earlier quoted context omitted.

You can vendor images. Never have your product depend on something that is in the internet. Spin up Harbour locally and put it in the middle to cache at the very least.

Imagine if everyone actually did this. Then we would have a myriad of base images hiding even more malware than we do currently. Not to mention vertically integrating the entire Docker layer set defeats the whole point of using Docker in the first place.

They're internal mirrors of public images, if there's something in your infrastructure installing malware on them you've got bigger problems

Re: Docker is deleting Open Source organisations - what you need to know

#455

Post by npn »

londons_explore wrote: post #312
kajaktum wrote: post #276

Earlier quoted context omitted.

> Instead it has a multi-million dollar company behind it, and VC's who demand profits from a thing that shouldn't have ever had a business plan. But you don't have to host curl? Who's gonna put the money to host all the images and bandwidths that ten of thousands of companies use but never pay?

It could have been designed with a self-host option or a torrent/ipfs backend for near-zero hosting costs and still be 'just works' for the user.

pretty sure you haven't used ipfs before.

for users to download resources from ifps you either need to install the client (which quite resource intensive) or use the gateways (which is just a server and cost money to run).

also the speed and reliability are nowhere good enough for serious works.

Re: Docker is deleting Open Source organisations - what you need to know

#456

Post by monetus »

boredumb wrote: post #353
striking wrote: post #343

Earlier quoted context omitted.

That PDF links to https://web.archive.org/web/20210223111850/https://www.nerve... . Would be quite the troll to go to the effort of buying a domain just to mess with an open source author.

You're probably right - I assumed the name terry davis being embedded in an email following a schizophrenic rant about software was a ruse.

I think it was genuine admiration, at least that is how I took it.

Re: Docker is deleting Open Source organisations - what you need to know

#457

Post by [deleted] »

richardwhiuk wrote: post #329
petesergeant wrote: post #262

Earlier quoted context omitted.

> escrowing Are you sure this is what you mean? Escrow is a type of contactual arrangement, one type of which is agreeing with a commercial partner that you get a copy of their source-code if they go broke. I feel like you mean vendoring.

[flagged]

[deleted]

Re: Docker is deleting Open Source organisations - what you need to know

#458

Post by tehbeard »

mc4ndr3 wrote: post #414
aprdm wrote: post #330

Earlier quoted context omitted.

You can vendor images. Never have your product depend on something that is in the internet. Spin up Harbour locally and put it in the middle to cache at the very least.

Imagine if everyone actually did this. Then we would have a myriad of base images hiding even more malware than we do currently. Not to mention vertically integrating the entire Docker layer set defeats the whole point of using Docker in the first place.

That's.... I don't know how you even arrived at that idea of that being what happens? Are you imagining some kludged together perl script to hackily save the tarballs, written by someone who is then immediately let go?

What they're suggesting is basically setting up a cache for it locally in-between them and the "main repo" and ensuring the cache doesn't delete after x days and/or keep backups of the images they depend on.

If the package disappears, or the main repo falls over (cough github, cough), your devs, CI & prod aren't sat twiddling thumbs unable to work...

and if the package is nuked off the planet? You've got some time then to find an alternate / see where they move to.

Re: Docker is deleting Open Source organisations - what you need to know

#459

Post by SergeAx »

dbingham wrote: post #230

As an SRE Manager, this is causing me a hell of a headache this morning. In 30 days a bunch of images we depend on may just disappear. We mostly depend on images from relatively large organizations (`alpine`, `node`, `golang`, etc), so one would want to believe that we'll be fine - they're all either in the open source program or will pay. But I can't hang my hat on that. If those images disappear, we lose the abilit…

Our organization currently caching all and every external dependencies we are using: Go, Python, npm and .NET packages, Docker images, Linux deb packages, so everything is contained inside our perimeter. We did that after one day our self-hosted Gitlab runners were throttled and then rate-limited by some package repository and all CI pipelines halted.

Re: Docker is deleting Open Source organisations - what you need to know

#460

Post by isatty »

joshmanders wrote: post #322
cauthon wrote: post #194

Earlier quoted context omitted.

> And their entire marketing strategy is built around free hosting for public data 1. Embrace 2. Extend it's bonkers when people innocently trust Microsoft to do the right thing

This would make sense if it wasn't a core feature of GitHub LONG BEFORE Microsoft bought them. Can we stop this madness already?

No, because Microsoft did already buy them?
Post reply on HN