Live data from Hacker News

Docker in Production: An Update

thehftguy.com

51–60 of 97 posts

Re: Docker in Production: An Update

#51

Every three months or so I tell myself "right,get your finger out, and do something production quality with containers" and come to the same conclusion this guy did.

My latest foray into bleeding edge ended when I found out AWS Lambda doesn't support python3. :(

Re: Docker in Production: An Update

#52

> CoreOS is an operating that can only run Docker and is exclusively intended to run Docker. This shows an astonishing level of ignorance for someone who claims to have done their research. > First, the main benefit of Docker is to unify dev and production. Having a separate OS in production only for containers totally ruins this point. What? This makes no sense. Your images will be the same between dev and prod, eve…

>> 120+ containers on 12 hosts

it is virtually irrelevant what you use to run and operate this sort of cluster. it gets tricky when you pass 100 nodes and even trickier when you get to 1000+ nodes in a non-linear fashion. Docker certainly has issues that are pretty severe when you are in the financial space and not a big deal if you are running a popular blog like medium.com for example.

Re: Docker in Production: An Update

#53
post #2

> I am moderately confident that there is no-one on the planet using Docker seriously AND successfully AND without major hassle. Though the tone of this article is very negative, the conclusion is interesting to me as someone that's considered Docker but hasn't done much with it beyond experimenting locally. I'm assuming if there's any forum that has users that can speak to their use of Docker in production, this wou…

We've been running docker in production since late 2013 (data science SaaS). We had some growing pains in the beginning, but since then it has been smooth sailing and a tremendous help in getting our services deployed reliably. However, we have always been very conservative when it comes to upgrading docker and have our own custom glue in place. Still, the statement that "no-one on the planet using Docker seriously A…

Size of your infra would he helpful.

Re: Docker in Production: An Update

#54
post #8
post #2

> I am moderately confident that there is no-one on the planet using Docker seriously AND successfully AND without major hassle. Though the tone of this article is very negative, the conclusion is interesting to me as someone that's considered Docker but hasn't done much with it beyond experimenting locally. I'm assuming if there's any forum that has users that can speak to their use of Docker in production, this wou…

We're technically using it in production for my site, www.bugdedupe.com, but we're still in beta, so we haven't experienced heavy usage. We've been using Kubernetes to deploy Docker containers on Google Container Engine, and while there have been a few issues due to Docker/Kubernetes (namely, getting the containers to expose localhost to each other, and to expose themselves to the world), the issues that we've had so…

Size of your infra would he helpful to know.

Re: Docker in Production: An Update

#55
post #26

I still think that Solaris zones are / were a superior technology. Sadly it died with the demise of Solaris as an operating system. Still in use in some "must have enterprise" types of companies. I would not run anything serious on docker (definitely not yet) if I would not be heavily invested in understanding and contributing to the technology (docker codebase + related). Docker is a nice to have but absolutely abst…

Solaris within Oracle is as good as dead from the latest reports. However, Illumos is a Solaris descendant that is very much alive. It has all the good systems stuff that came out of Sun (zones, ZFS, DTrace) and is backed by Joyent (now part of Samsung). There's also FreeBSD jails that can be used to contain applications. I'm not sure about the timeline, but I think jails came first. Sun engineers wanted to achieve t…

Oracle is the company where great projects go and die.

Re: Docker in Production: An Update

#56
post #50
post #9

It's great that hftguy thinks Google Container Engine is stable (I work on it) but I'm sorry to say it's very easy to prove that is, in fact, running Docker on the nodes. You can just SSH into one and see for yourself. Kubernetes was built from the ground up to orchestrate Docker. CoreOS did a lot of work to make it possible to trade rkt in for Docker's engine, and the cri (Container Runtime Interface) is now general…

So what magic combination of distro + FS do you use to make Docker stable?

The default distro is Container Optimised OS: https://cloud.google.com/container-optimized-os/docs/. It's derived from Chromium OS, which means we can take advantage of the team who build images for the many devices which use it, and the security response infrastructure around it.

With 'docker info' on a node you can see we use OverlayFS, which seems a popular choice in the community also: http://burkelibbey.s3.amazonaws.com/dockercon-fs.pdf

Re: Docker in Production: An Update

#57
post #26

I still think that Solaris zones are / were a superior technology. Sadly it died with the demise of Solaris as an operating system. Still in use in some "must have enterprise" types of companies. I would not run anything serious on docker (definitely not yet) if I would not be heavily invested in understanding and contributing to the technology (docker codebase + related). Docker is a nice to have but absolutely abst…

Solaris within Oracle is as good as dead from the latest reports. However, Illumos is a Solaris descendant that is very much alive. It has all the good systems stuff that came out of Sun (zones, ZFS, DTrace) and is backed by Joyent (now part of Samsung). There's also FreeBSD jails that can be used to contain applications. I'm not sure about the timeline, but I think jails came first. Sun engineers wanted to achieve t…

joyent has done some rather dark magic to run Linux containers on an illumos/solaris/smartos/whatever-they-call-it cluster; e.g. https://docs.joyent.com/public-cloud/api-access/docker

Re: Docker in Production: An Update

#58
post #45
post #9

It's great that hftguy thinks Google Container Engine is stable (I work on it) but I'm sorry to say it's very easy to prove that is, in fact, running Docker on the nodes. You can just SSH into one and see for yourself. Kubernetes was built from the ground up to orchestrate Docker. CoreOS did a lot of work to make it possible to trade rkt in for Docker's engine, and the cri (Container Runtime Interface) is now general…

Is it eventually going to run rkt/cri-o/lmctfy?

If you're a customer and you're interested in either of the first two, please ping me an e-mail.

GitHub's lmctfy README states "We are not actively developing lmctfy further and have moved our efforts to libcontainer."

Re: Docker in Production: An Update

#59

> As confirmed by internal sources, they experienced massive troubles to get Docker working in any decent condition I call B.S. on this. Amazon wouldn't have spent so much effort on ECS if this was true.

Amazon employee confirming the article: https://news.ycombinator.com/item?id=12364522

Details matter at Amazon scale as they say. I have used Docker ever since it was beta, it never made it to our production systems though. LXD looks pretty promising, unprivileged containers, no container service and so on. When I have more time I will investigate how to roll it on CentOS.
Post reply on HN