4 ms·

> Well sure, but if that's your threat model then don't you need to restart whole VMs/machines rather than individual containers? You sure do, but you pay some

by ben509 8y ago

> Well sure, but if that's your threat model then don't you need to restart whole VMs/machines rather than individual containers? You sure do, but you pay someone else to deal with all that nonsense. And because you can share those VMs, it's cheaper. > I appreciate that they make sense as a deployment solution for e.g. Python Any language-specific solutions like .war files have no answer for binary dependencies or utilities provided by a package manager, and they're entirely right not to try and solve that problem. You also occasionally will get a third party that requires you run their awful utility... you may be seeing where my skepticism of "we'll just write good code" comes from. The other advantage is your deployment artifact has a single identifier, so it gives you a much nicer story for rolling back a bad deployment. > ... but you pay most of the price in terms of not being able to use normal IPC mechanisms. If I had computing demands that warranted IPC via shared memory, I'd probably agree the overhead of containers is too much.

lmm 8y ago
> You sure do, but you pay someone else to deal with all that nonsense. I don't think I follow? I've got a class of problems where I might want to restart my application, and a class of problems where I might want to restart the VM/machine. I don't see how adding containers in between the two helps. > Any language-specific solutions like .war files have no answer for binary dependencies or utilities provided by a package manager, and they're entirely right not to try and solve that problem. JVM culture steers away from depending on binaries on the host system; in the rare cases where you want JNI then something like https://github.com/mrburrito/jni-loader https://github.com/mrburrito/jni-loader is the standard approach IME. I think I've used literally two system libraries in my career, and both were standard enough that I was content to include them in the OS baseline. Appreciate that other languages do approach this differently. > The other advantage is your deployment artifact has a single identifier, so it gives you a much nicer story for rolling back a bad deployment. I don't see how this is different from any other kind of deployment?

by ben509 8y ago

lmm 8y ago

> You sure do, but you pay someone else to deal with all that nonsense. I don't think I follow? I've got a class of problems where I might want to restart my application, and a class of problems where I might want to restart the VM/machine. I don't see how adding containers in between the two helps. > Any language-specific solutions like .war files have no answer for binary dependencies or utilities provided by a package manager, and they're entirely right not to try and solve that problem. JVM culture steers away from depending on binaries on the host system; in the rare cases where you want JNI then something like https://github.com/mrburrito/jni-loader https://github.com/mrburrito/jni-loader is the standard approach IME. I think I've used literally two system libraries in my career, and both were standard enough that I was content to include them in the OS baseline. Appreciate that other languages do approach this differently. > The other advantage is your deployment artifact has a single identifier, so it gives you a much nicer story for rolling back a bad deployment. I don't see how this is different from any other kind of deployment?