Live data from Hacker News

We built an air-gapped Jira alternative for regulated industries

plane.so

51–60 of 201 posts

Re: We built an air-gapped Jira alternative for regulated industries

#51
post #43

Any more details about the offline patch/upgrade process? When I looked at gitlab years ago, it handled that fine but the documentation seemed "nervous" about it.

I struggle to think why that would be any drama, unless the setup is trying to use "bare" gitlab (e.g. running the puppet commands manually versus $(docker save -o airgapped_gitlab.tar gitlab/gitlab-ce:18.2.0-ce && cp ./*.tar /dev/disk/usb-whatever/goodluck/))

Re: We built an air-gapped Jira alternative for regulated industries

#52

TBH, if I were working in such a highly regulated industry, I'd be very hesitant about buying software from a company with a .so domain and basically beholden to the whims of the government of Somalia. If they said "implement a backdoor for us or all your non-airgapped customers lose access tomorrow", are you sure the company would be able and willing to say no?

That's a very odd thing to bring up in the context of self-hosting, since you would not interact with their .so domain whatsoever; ensure that the AGPLv3 aligns with your needs, git clone -b v0.27.1 https://github.com/makeplane/plane.git and be happy

Re: We built an air-gapped Jira alternative for regulated industries

#53
post #30

Earlier quoted context omitted.

At this level (govt, 6 figure+ deals) I would at least consider if this problem should have a non-tech solution, and instead have a legal/lawyer solution. In my experience (not US based though) the govt contracts are under compliance programmes as well so the govt agency’s legal/contract mgmt team would probably follow up internally on expiring contracts (ie licences) and require the owning stakeholder to either rene…

Years back a friend of mine's startup failed when USAF pirated their software and the original customer org stopped paying for it. Feds are DMCA immune, so no real recourse.

This seems very suspect.

Usually you do have recourse via procurement channels and reps. If you file a complaint with that agency stating that they’re using a license without paying for it, it will result in at least an investigation.

Re: We built an air-gapped Jira alternative for regulated industries

#55
Given their customer base, I wonder why they bothered with any license enforcement for the pure on-prem. Just do the "license enforcement" implicitly when customers want to update: they need to log in to get the new image.

(Your regular annoying notice that FIPS-compliant crypto is, if anything, marginally less secure than non-FIPS crypto; not that it matters in any material way, just, it's not a flex.)

Re: We built an air-gapped Jira alternative for regulated industries

#56

[flagged]

I don't think this cynicism is productive. I've had the pleasure of shipping "regular local applications" several times over my career, and to do it you lose a lot of very basic stuff that modern developers take for granted, most importantly software update and debugging telemetry. It's not a small thing to take a SAAS product and bundle it up like this, and most users don't benefit from it, so it's also not a natural starting place.

Re: We built an air-gapped Jira alternative for regulated industries

#60

Now do an air-gapped Confluence killer, please.

We already support this. We pack all our products in one single offering.

This includes Projects + Wiki. More here: https://docs.plane.so/core-concepts/pages/wiki

Here's a blog on how you can switch between products within Plane, https://plane.so/blog/introducing-apprail-plane-new-navigati...

Post reply on HN