4 ms·
Have you considered a solution like graylog for centralized logging with both the VMs and Containers? Thats what my company tends to do with clients and we freq
by shamsalmon 10y ago
Have you considered a solution like graylog for centralized logging with both the VMs and Containers? Thats what my company tends to do with clients and we frequently choose containers and multiple VMs together running something like docker stack. As long as you do proper security practices on the container itself, such as not running the application as root, I dont see any downside to running things in containers over VMs as long as you have proper logging. Combined with something like ansible or another config management you can automate this whole process and it works really well for us.
- arca_vorago 10y agoYeah I use graylog and elk stack and ansible already, there is still an isolation level with full VM's you don't get with containers. (namespace sharing issues, kernel-level system call attack issues, etc). Of course VM's have the same issues with the host OS, but there is a single layer more for an attacker to penetrate, and as we know, security is all about layers. On that note, a FOSS ansible tower alternative popped up on my radar recently that looks interesting. https://github.com/ansible-semaphore/semaphore https://github.com/ansible-semaphore/semaphore
- shamsalmon 10y agoThanks for sharing! Currently only using jenkins for our ansible deployments but this looks like a great WIP for an eventual replacement.