4 ms·

Why I use Docker for everything? saves me from dependency hell, chasing down the required libraries. Plus, some more complex stacks, which normally would take l

by mamon 8y ago

Why I use Docker for everything? saves me from dependency hell, chasing down the required libraries. Plus, some more complex stacks, which normally would take like half day to install now take just one "docker run" command (or "docker-compose up"). That's how I installed Nextcloud, Gitlab, etc. I think that Docker is a great time saver for those who want just to play with a new piece of software, and don't have the time to learn all the details of some arcane install procedure.

twblalock 8y ago
> I think that Docker is a great time saver for those who want just to play with a new piece of software, and don't have the time to learn all the details of some arcane install procedure. That's true, but if you do that in production you're running untrusted code that could do pretty much anything. If you don't have your own Docker registry full of containers you either made yourself or have audited yourself, you might as well let anyone in the world run their code on your servers. And if you do have your own registry, it's a lot of work and it involves chasing down libraries and working with arcane install procedures. You can't really trust the public base images unless you fork them and audit them yourself, or just create your own. At some point you need to take responsibility for your own stack. Docker fine for messing around on your laptop but the real work starts when you need to get past that.
- dewey 8y ago
  But if you are not reviewing every other piece of code that you run without Docker it’s not much different from running it in Docker without reviewing the base image / images pulled in as dependencies.
akvadrako 8y ago
Indeed, for more and more people Docker is just the standard packaging solution. It's like saying "why use packages? You can just download the source and dependencies, then compile it manually".

by mamon 8y ago

twblalock 8y ago

> I think that Docker is a great time saver for those who want just to play with a new piece of software, and don't have the time to learn all the details of some arcane install procedure. That's true, but if you do that in production you're running untrusted code that could do pretty much anything. If you don't have your own Docker registry full of containers you either made yourself or have audited yourself, you might as well let anyone in the world run their code on your servers. And if you do have your own registry, it's a lot of work and it involves chasing down libraries and working with arcane install procedures. You can't really trust the public base images unless you fork them and audit them yourself, or just create your own. At some point you need to take responsibility for your own stack. Docker fine for messing around on your laptop but the real work starts when you need to get past that.

dewey 8y ago
But if you are not reviewing every other piece of code that you run without Docker it’s not much different from running it in Docker without reviewing the base image / images pulled in as dependencies.

akvadrako 8y ago

Indeed, for more and more people Docker is just the standard packaging solution. It's like saying "why use packages? You can just download the source and dependencies, then compile it manually".