591–600 of 764 posts
Earlier quoted context omitted.
There is no free tier https://quay.io/plans/
> Can I use Quay for free? > Yes! We offer unlimited storage and serving of public repositories. We strongly believe in the open source community and will do what we can to help! It’s completely free for public repositories.
Earlier quoted context omitted.
And these versions are often our of date, which is important given that podman is in active a development and you want to be using the latest version.
I don't understand what the issue is. Don't use an LTS distro if you want up to date software. Fedora and Arch are up to date for Podman. Alpine seems to be one minor version behind.
Earlier quoted context omitted.
> If those images disappear, we lose the ability to release and that's not acceptable. This shines light on why it is so risky (from both availability and security perspectives) to be dependent on any third party for the build pipeline of a product. I have always insisted that all dependencies must be pulled from a local source even if the ultimate origin is upstream. I am continuously surprised how many groups simpl…
We can't go NIH for everything. If we do that we're back to baremetal in our own datacenters and that's expensive and (comparatively) low velocity. We have to pick and choose our dependencies and take the trade off of risk for velocity. This is the tradeoff we made with the move to cloud. We run our workloads on AWS, GCP or Azure, use DataDog or New Relic for monitoring, use Github or GitLab for repos and pipelines,…
The problem with this approach begins when many people your build depends upon start to share it.
As an SRE Manager, this is causing me a hell of a headache this morning. In 30 days a bunch of images we depend on may just disappear. We mostly depend on images from relatively large organizations (`alpine`, `node`, `golang`, etc), so one would want to believe that we'll be fine - they're all either in the open source program or will pay. But I can't hang my hat on that. If those images disappear, we lose the abilit…
Maybe the cloud native foundation or the linux foundation could provide something like this to prevent vendor lock-ins?
I was coincidentially trying out harbor again over the last days, and it seems nice as a managed or self-hosted alternative. [1] after some discussions we probably gonna go with that, because we want to prevent another potential lock-in with sonarpoint's nexus.
Does anybody have similar migration plans?
The thing that worries me the most is storage expectations, caching and purging unneeded cache entries.
I have no idea how large/huge a registry can get or what to expect. I imagine alpine images to be much smaller than say, the ubuntu images where the apt caches weren't removed afterwards.
Earlier quoted context omitted.
> Docker should have been a neat tool made by one enthusiast, just like curl is. I have nothing but mad respect for Daniel Stenberg. 25 years of development of great software, for which he had been threatened[1] and had ridiculous US travel visa obtaining issues[2]. [1] https://daniel.haxx.se/blog/2021/02/19/i-will-slaughter-you/ [1] https://news.ycombinator.com/item?id=26192025 [2] https://daniel.haxx.se/blog/2020/1…
> [1] https://daniel.haxx.se/blog/2021/02/19/i-will-slaughter-you/ Wow that's clearly someone with serious mental issues :( I hope he could find some help for his condition.
Are they bleeding and trying desperately to find additional revenue streams?
Earlier quoted context omitted.
That's why better to have NetBSD + pkgsrc combo for servers.
You misspelled Nixpkgs ;-) I'm kidding, of course, but IIRC pkgsrc (and alikes, such as APT) has a number of limitations, for example a very limited ability to have multiple versions of the same package installed, making it less than optimal replacement. (I believe a lot of people depend on ability to spin up a new version while the old is running, then do the cutover and shut down the old one after it's not is use.)