3 ms·

Positive: it’s lxc based. Negative: it seems to focus a lot on the “I got hello world running in x minutes”. A dedicated keyword for “database”? What crazy log

Positive: it’s lxc based. Negative: it seems to focus a lot on the “I got hello world running in x minutes”. A dedicated keyword for “database”? What crazy logic is that??

irq-1 8y ago
From the docs (wtf?): > Please disable Selinux or any firewalls before configuring containers, networks, storage and cluster services. They can interfere in unpredictable ways. Once configured services are working you can add the relevant exceptions and enable them again.
- tobbyb 8y ago
  Unfortunately Selinux can interfere with processes in weird ways without clear messages to end users. When a container starts networking devices are created, if using layers or btrfs/zfs overlays or snapshots may be created, bind mounts activated. There is a lot of potential for permission issues. Similarly when creating overlay networks ports across systems need to be open. The idea behind this is users can ensure the functionality is working as desired before enabling firewalls and other security features so they can debug issues effectively. We have tried to provide a lot of documentation so new users can get started and get comfortable with containers and networking. Often users get discouraged if even after following the docs they run into issues.
  - unixhero 8y ago
    Makes sense...
- cjhanks 8y ago
  There are different layers of security. Presumably, when your hardware is provisioning a new operating system, it is protected by a Layer3 firewall. But, yeah - people tend to only skim the manuals.
tobbyb 8y ago
Hi, the build system is quite flexible. It's used to build all the open source apps currently available in the app store. That DB keyword basically allows you to roll out a linked database container for your app if required. Only Mysql and Postgresql is currently supported. These are Mysql and Postgresql instances that can be used for this. A lot of apps require databases and instead of configuring it manually this allows some degree of automation so a linked database container can be easily deployed if required.
- stephenr 8y ago
  I would have thought a more generic “requires” or “depends” property (ideally multi value) would be more useful, no?

Positive: it’s lxc based. Negative: it seems to focus a lot on the “I got hello world running in x minutes”. A dedicated keyword for “database”? What crazy logic is that??

irq-1 8y ago

From the docs (wtf?): > Please disable Selinux or any firewalls before configuring containers, networks, storage and cluster services. They can interfere in unpredictable ways. Once configured services are working you can add the relevant exceptions and enable them again.

tobbyb 8y ago
Unfortunately Selinux can interfere with processes in weird ways without clear messages to end users. When a container starts networking devices are created, if using layers or btrfs/zfs overlays or snapshots may be created, bind mounts activated. There is a lot of potential for permission issues. Similarly when creating overlay networks ports across systems need to be open. The idea behind this is users can ensure the functionality is working as desired before enabling firewalls and other security features so they can debug issues effectively. We have tried to provide a lot of documentation so new users can get started and get comfortable with containers and networking. Often users get discouraged if even after following the docs they run into issues.
- unixhero 8y ago
  Makes sense...
cjhanks 8y ago
There are different layers of security. Presumably, when your hardware is provisioning a new operating system, it is protected by a Layer3 firewall. But, yeah - people tend to only skim the manuals.

tobbyb 8y ago

Hi, the build system is quite flexible. It's used to build all the open source apps currently available in the app store. That DB keyword basically allows you to roll out a linked database container for your app if required. Only Mysql and Postgresql is currently supported. These are Mysql and Postgresql instances that can be used for this. A lot of apps require databases and instead of configuring it manually this allows some degree of automation so a linked database container can be easily deployed if required.

stephenr 8y ago
I would have thought a more generic “requires” or “depends” property (ideally multi value) would be more useful, no?