Live data from Hacker News

What's new in Docker 1.13: prune, secrets, checkpoints and more

cloudshare.com

31–40 of 62 posts

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#31
I'm really looking forward to seeing the scientific community adopt docker as a way to distribute reproducible research and coursework.

MIT 6.S094 has a Dockerfile[^1] that contains all the software required for taking part in the class. This is a huge boon for getting stuck into the class and its coursework.

[^1]: http://selfdrivingcars.mit.edu/files/Dockerfile

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#32

Prune seems not that well thought to me. Don't get me wrong, I do find it useful but many people use containers as environments. Think about how many people are going to run prune only to find their work go missing. If you are gonna add a nuclear button, do it with a big red alert and give the option to whitelist some containers.

That's kind of like saying the 'rm' command is not well thought out, because many people wouldn't want to delete the whole file system when running 'rm -r /'.

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#34

I'm just a guy that wants to deploy web apps. Is docker overkill for me? Basically, I want to be able to test something on my local machine under the same conditions it will be running on my server. Containerisation seems like the only way to do this that doesn't involve keeping packages and system configurations in sync in two or more systems.

> Containerisation seems like the only way to do this that doesn't involve keeping packages and system configurations in sync in two or more systems. Virtual machines will also work. Docker serves as a lightweight virtualization that will provide the same experience, assuming you are willing to keep to the kernel and Docker version "in sync" between prod and local.

Lately I've been sending a bunch of patches upstream to the runv project (https://github.com/hyperhq/runv). Turns out that wrapping the docker interface with full VM isolation is a model I very much like.

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#35

I'm really looking forward to seeing the scientific community adopt docker as a way to distribute reproducible research and coursework. MIT 6.S094 has a Dockerfile[^1] that contains all the software required for taking part in the class. This is a huge boon for getting stuck into the class and its coursework. [^1]: http://selfdrivingcars.mit.edu/files/Dockerfile

Currently a lot of research is computed using Condor to schedule jobs and yeah, they span across multiple machines, like how Jenkins master/slaves work. It's been a go-to for many HPC research.

There's been some effort individually to integrate Docker with Condor (after all, both are just processes running on some host machine).

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#36

Why not one 'prune' command with 'containers', 'images', ... as an argument / subcommand? Would have seemed more intuitive to me.

All of the other commands have been namespaced by what they deal with, so I think it makes more sense in the come t of everything else.

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#37
post #25

Earlier quoted context omitted.

I have a gist for it: https://gist.github.com/pubkey/73dcb894cf5f7d262863 #stop and delete all containers docker rm -f $(docker ps -a -q) #delete all images docker rmi -f $(docker images -q)

This is NOT equivalent. The OP was talking about removing unused images. Your commands remove all images.

Maybe this?

    docker rm $(docker ps -qa --no-trunc --filter "status=exited")
    docker rmi $(docker images --filter "dangling=true" -q --no-trunc)

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#38

I'm just a guy that wants to deploy web apps. Is docker overkill for me? Basically, I want to be able to test something on my local machine under the same conditions it will be running on my server. Containerisation seems like the only way to do this that doesn't involve keeping packages and system configurations in sync in two or more systems.

For your use case, containers aren't overkill, but a full orchestration system probably is. Just letting some simple outside process just handle starting them up is fine, and Swarm seems to have improved enough that you can use that for single computer "keep my app running with x instances" stuff with no overhead.

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#39
Curious what methods others use for handling secrets at build time (using docker-compose). I'm currently installing (private) dependencies at runtime by mounting my secrets as a volume. I couldn't find a method that didn't seem to have some risk of inadvertently exposing them.

Re: What's new in Docker 1.13: prune, secrets, checkpoints and more

#40

Prune seems not that well thought to me. Don't get me wrong, I do find it useful but many people use containers as environments. Think about how many people are going to run prune only to find their work go missing. If you are gonna add a nuclear button, do it with a big red alert and give the option to whitelist some containers.

That's kind of like saying the 'rm' command is not well thought out, because many people wouldn't want to delete the whole file system when running 'rm -r /'.

Actually the rm command won't let you remove the root filesystem.

Also, when ran in bash but also supported by other shells, it supports regular expressions and extended pattern matching letting you for example specify not which files you want deleted, but which files you want not.

Post reply on HN