3 ms·
As a happy Docker user with a lot of respect for what Docker has achieved, what concerns me is that Docker is clearly an enabler for people to totally abandon p
by csirac2 11y ago
As a happy Docker user with a lot of respect for what Docker has achieved, what concerns me is that Docker is clearly an enabler for people to totally abandon proper release and dependency management along with sane sysadmin friendly configuration.
I can't tell you the number of times I've hoped to use a public docker image or just the Dockerfile, only to spend hours futzing with it because I was unhappy with the grotesquely insecure configuration or because I needed to work around a bunch of assumptions that are invalid once I've tuned the Dockerfile for my environment.
- justincormack 11y agoFix the insecurities upstream or dont use the software. Else upgrades will be a nightmare too.
- csirac2 11y agoI agree, and I do (if I end up actually keeping a piece of software running). It's also quite likely that a pre-built docker image isn't going to satisfy everyone's deployment requirements. Starting out with a philosophy that you'll make all the configuration and security choices for every user of your project isn't a great start, and that's how I read all these hard-coded assumptions.