Live data from Hacker News

MinIO stops distributing free Docker images

github.com

491–500 of 585 posts

Re: MinIO stops distributing free Docker images

#492

So, basically, MinIO is dead. Time to move on, folks. Dead horse is dead. Kicking it will release toxic decomposition sludge.

It's still free and available, you just need to run the docker build command yourself or pay them to get their enterprise version.

Re: MinIO stops distributing free Docker images

#493

Ceph is an open source project run by a foundation. Minio is a company backed by VCs looking for a return. There is also seaweedfs, powerscale, openstack swift and hyperstore. The S3 compatible space is crowded.

As a user of Ceph it does feel like a truly open source project. Redhat/IBM do sponsor a lot of work on the project but there are lots of other contributors. I have contributed maybe a dozen changes myself and it was quite easy to do and the maintainers are fairly responsive.

Re: MinIO stops distributing free Docker images

#494
post #481

Earlier quoted context omitted.

> It's been talked to death in other threads already, but typically when you provide a service, even if it's free, it is polite to give warning that you will stop providing said service in the future. They actually did that by saying that there are no new releases planned and new releases may be cut at anytime and everyone uses them at their own risk. https://github.com/minio/minio/commit/9e49d5e7a648f00e26f224...

… that commit is from last week. One week is not at all a sufficient warning, that’s rash and makes them look quite bad. Practically manic.

[deleted]

Re: MinIO stops distributing free Docker images

#495

Earlier quoted context omitted.

OK, have a look at GitHub contributors metric. 404 today, 405 yesterday. Just to clarify, I'm not affiliated with or protecting MinIO, I don't know anything about this software. But it seems to me that there's some overreaction about Docker here, and in reality it is highly possible that this decision might not affect the product the way it's being discussed these days.

Are those active contributors or lifetime contributors? And don't those counts leave out anyone who doesn't have a github account or doesn't associate their got email with their github account?

I'm not sure that GitHub provides those metrics, unfortunately.

Re: MinIO stops distributing free Docker images

#496

Since the whole docker thing where people were complaining about having to pay 10USD, I am happy when OSS projects pull the rug, tech bros you're paid to solve your company's issues, nobody in OSS owes you anything, go earn your salary and build the docker image that fix the CVE, or stfu We all know you don't care about loyalty correctness or anything, you just someone to do the work you're paid for

Spot on. The number of people who are seemingly completely lost without a free DockerHub build is terrifying. Maybe it explains why software quality has degraded so much over the last several years.

are you saying there's a bunch of human centipedes bopping around here who are both the people who would do the minio rug pull as the ones who complain about not getting free services?

Re: MinIO stops distributing free Docker images

#497
post #478

Earlier quoted context omitted.

> Best to get insecure and vulnerable software out of the hands of those who may not be familiar with this CVE or their change in policy that has not gotten a press release in any way. Why is that the best? MinIO is not the type of thing that people ought to be directly making available on the Internet anyway, so CVEs are mostly irrelevant unless you are an organization that has to keep on top of them, in which case…

Zero trust is the way to assess threat. Not Internet access or not.

No, it is a defense strategy. For e.g. hobbyists, it's basically irrelevant, and having something on a private LAN is fine. There is almost no chance of an issue. Not everything in the world needs to be maximally secured, and the people who are using those IAM policies are probably not pulling a vanilla image off Dockerhub to run something as fundamental as their storage layer. They probably also have firewalls tightly locking down which machines are able to talk to MinIO on top of token auth.

The cargo-culting around security is so bizarre to me. In a context where e.g. your organization needs to pass audits, it's cheaper/easier to just update stuff and not attempt to analyze everything so you can check the box. For everyone else, most security advisories are just noise that usually aren't relevant to the actual way software is used. Notably, no one in these discussions is even bringing up what the vulnerability is.

Re: MinIO stops distributing free Docker images

#498

To everyone who gets blocked by this: I prompted Haiku 4.5, Anthropic's cheapest current model, in Claude Code with "Read this github issue: https://github.com/minio/minio/issues/21647 I need a new docker image for the latest minio version. Make it so.". It wrote a Dockerfile, I asked it to build it (not only am I incapable of finding and downloading the Dockerfile from the repository myself, I'm even incapable of re…

I'm trying to be charitable here, but you're being incredibly obtuse in your response. The issue here is very much not that someone has to build a Docker image. There's already a Dockerfile in the repo that works to build it, you didn't even need some LLM to do that for you. That's not the issue. The issue is that their existing Docker image has billions of downloads and they simply stopped publishing updates unilaterally with no material attempt to communicate this to their users when the current image is affected by a critical CVE that will now never be fixed.

If you don't understand the difference between these two issues, I would suggest it is /you/ that lacks the ability to add sufficient value to your employer (as if that's even a standard we should care about We are people, not merely cogs in some VC's wet dream).

Re: MinIO stops distributing free Docker images

#499

Earlier quoted context omitted.

I imagine that this makes it much less viable for hobby use, or as a dependency for other open source projects, but setting up a private docker registry and building this image nightly isn’t onerous for any business

The fact that these things are happening at all is enough for us to shop for alternatives. MinIO will be completely gone as soon as we identify the best option and get it rolled out, which should be rather quickly. If they were hoping to drive conversions to paying customers, they've done the opposite, at least with my employer.

You can't put 3 lines in a Dockerfile but will be "shopping for alternatives", "identifying the best option" and "get it rolled out"? Do you ever get anything done, "rather quickly"?

Re: MinIO stops distributing free Docker images

#500

`docker build` is free, and faster to type than the fake outrage in the github issues and the dicator-calling below in this thread.

With docker build comes a whole slew of dependencies that you wouldn't have with official images. You need some place to host the image, or build on the servers you use for deployment, and cross platform compilation (i.e. ARM images) becomes an issue.

It'll take more time than just typing out a comment on HN to get all of that in play. Actually getting a docker registry of your own set up with auth and everything can easily take half an hour, and adding+testing periodic sync and compile steps in your CI/CD will take another couple of hours if you're not set up for it.

Hardly the end of the world, though. Reminds me of the infamous "why can't people on github just give me the .exe" reddit troll post.

Post reply on HN