Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MinIO stops distributing free Docker images

github.com

Post reply on HN
Print view View original

521–530 of 585 posts

Re: MinIO stops distributing free Docker images

#521

Post by hansmayer »

cyanydeez wrote: post #496
hansmayer wrote: post #476

Earlier quoted context omitted.

Spot on. The number of people who are seemingly completely lost without a free DockerHub build is terrifying. Maybe it explains why software quality has degraded so much over the last several years.

are you saying there's a bunch of human centipedes bopping around here who are both the people who would do the minio rug pull as the ones who complain about not getting free services?

It is hardly a rug pull, when they are still giving away the full source + the actual Dockerfile, so you know, you can build the image. In either case, if you are not running your own registry and are unable to build an image, but still complain about this minor issue...you are probably in the wrong business.

Re: MinIO stops distributing free Docker images

#522

Post by okl »

ecshafer wrote: post #435

Ceph is an open source project run by a foundation. Minio is a company backed by VCs looking for a return. There is also seaweedfs, powerscale, openstack swift and hyperstore. The S3 compatible space is crowded.

Also there is garage, which I found easy to setup: https://garagehq.deuxfleurs.fr/

Re: MinIO stops distributing free Docker images

#523

Post by raesene9 »

Jeslijar wrote: post #434

I'll let docker's security team know that an insecure, obsolete docker image is being served and the maintainers have officially acknowledged they will no longer support it. Best to get insecure and vulnerable software out of the hands of those who may not be familiar with this CVE or their change in policy that has not gotten a press release in any way.

Unfortunately I don't think they're going to get involved there. There are already multiple "official" images on Docker Hub that are unmaintained and have plenty of CVEs (e.g. Centos https://hub.docker.com/_/centos/tags)

I think the most they'd do is add the DEPRECATED note to the Docker hub page as they have done for things like Centos

Re: MinIO stops distributing free Docker images

#524

Post by tormeh »

reconnecting wrote: post #504
trueismywork wrote: post #490

Earlier quoted context omitted.

Ease of setup and certified working solution. And yes, people should pay for certified working solution. But not when they use it the first time itself

Yes, I understand that Docker is easy to set up. However, I also understand that for any organization it is very painful to change their existing stack, thus I'm trying to understand what is gained between AGPL sources without Docker and switching technology to something different with Docker except 'ease of setup'.

Not in this position, but obviously this might be the first of many measures taken. Next they could make the repository private. Code is only for customers, Red Hat style. It's not as popular as RHEL - a CentOS style effort is unlikely to materialize. Bug tracker and forums private. Lawyer letters about whether or not your usage is license compliant and a reminder that it would be expensive to prove it is, Oracle style.

Open source means what the license says it means. Expectations and conventions can be broken.

Re: MinIO stops distributing free Docker images

#525

Post by mmh0000 »

Jeslijar wrote: post #434

I'll let docker's security team know that an insecure, obsolete docker image is being served and the maintainers have officially acknowledged they will no longer support it. Best to get insecure and vulnerable software out of the hands of those who may not be familiar with this CVE or their change in policy that has not gotten a press release in any way.

[dead]

Re: MinIO stops distributing free Docker images

#526

Post by [deleted] »

lnxg33k1 wrote: post #452

Since the whole docker thing where people were complaining about having to pay 10USD, I am happy when OSS projects pull the rug, tech bros you're paid to solve your company's issues, nobody in OSS owes you anything, go earn your salary and build the docker image that fix the CVE, or stfu We all know you don't care about loyalty correctness or anything, you just someone to do the work you're paid for

[deleted]

Re: MinIO stops distributing free Docker images

#527

Post by NewJazz »

reconnecting wrote: post #495
NewJazz wrote: post #485

Earlier quoted context omitted.

Are those active contributors or lifetime contributors? And don't those counts leave out anyone who doesn't have a github account or doesn't associate their got email with their github account?

I'm not sure that GitHub provides those metrics, unfortunately.

Baffling considering how much they charge and how easy it is to get that info just from the git repo data.

Re: MinIO stops distributing free Docker images

#528

Post by tristor »

jeroenhd wrote: post #507
tristor wrote: post #498

Earlier quoted context omitted.

I'm trying to be charitable here, but you're being incredibly obtuse in your response. The issue here is very much not that someone has to build a Docker image. There's already a Dockerfile in the repo that works to build it, you didn't even need some LLM to do that for you. That's not the issue. The issue is that their existing Docker image has billions of downloads and they simply stopped publishing updates unilate…

The LLM stuff aside, how is minio supposed to communicate with the people who pulled their docker image? The time line is rather short (the README announcing source only releases got updated a week and half ago) but it's not like Docker will let you email everyone and say "you're using one of our products, read this post about our new distribution model", probably for good reason. I can only imagine the "vulnerabilit…

You're taking an all or nothing approach, when that isn't how this actually works. Software lifecycle management is part of product management 101, and generally how this is handled is you provide /advanced notice/ before an action is taken. Will this fully solve this issue and guarantee notification to every impact user? No. Will it help some of them and show a material attempt to be a good steward and act in good faith? Yes.

Some actions that they could have taken but didn't:

* Post a public notice on their website with a set date 90+ days out for when they'd shut off CI and stop producing new images

* Add a line to their Docker init script that puts out a deprecation notice with the same date 90+ days out to STDOUT that will get seen/logged on systems using the image

* Send direct communication to their paying customers via email or generated support tickets notifying them of the upcoming deprecation and that they need to switch their deployments to a new image source on a set date 90+ days out.

They could have done all three of these things, they could have done other things also. Most importantly, anything they do should have time for people to digest and respond to the action in a reasonable manner, you should not rug pull people by unilaterally changing something with no prior notice, only telling people about the change as it happens, and immediately causing a problem (no forward path for CVE fixes).

Re: MinIO stops distributing free Docker images

#529

Post by reconnecting »

tormeh wrote: post #524
reconnecting wrote: post #504

Earlier quoted context omitted.

Yes, I understand that Docker is easy to set up. However, I also understand that for any organization it is very painful to change their existing stack, thus I'm trying to understand what is gained between AGPL sources without Docker and switching technology to something different with Docker except 'ease of setup'.

Not in this position, but obviously this might be the first of many measures taken. Next they could make the repository private. Code is only for customers, Red Hat style. It's not as popular as RHEL - a CentOS style effort is unlikely to materialize. Bug tracker and forums private. Lawyer letters about whether or not your usage is license compliant and a reminder that it would be expensive to prove it is, Oracle sty…

Most of people here put an equal sign between being open source and having Docker image.

For me open source is a license, and Docker is a distribution feature. From this prospective I can not understand how distributional channel and type of license are related, as code is still AGPL.

Re: MinIO stops distributing free Docker images

#530

Post by stackedinserter »

skywhopper wrote: post #321
stackedinserter wrote: post #307

Earlier quoted context omitted.

How to not pay full price on AWS? We pay $10K+ per month and nobody gives us any discount.

The good discounts start around 100x your spend.

You pay $1 million per month for AWS?
Post reply on HN