5 ms·

A link to the actual source code (90% Rust) and README: https://github.com/bottlerocket-os/bottlerocket https://github.com/bottlerocket-os/bottlerocket And her

A link to the actual source code (90% Rust) and README: https://github.com/bottlerocket-os/bottlerocket https://github.com/bottlerocket-os/bottlerocket And here is a post from AWS with more technical details: https://aws.amazon.com/blogs/aws/bottlerocket-open-source-os-for-container-hosting/ https://aws.amazon.com/blogs/aws/bottlerocket-open-source-os...

joana035 7y ago
The blog post statements looks like FUD, and of course, are easy to echo. Is the telemetry enabled by default?
whalesalad 7y ago
> To improve security, there's no SSH server in a Bottlerocket image, and not even a shell. Consider my interest to be piqued.
lysium 7y ago
Thanks! I miss the part where it explains how it works. Is it all just containers?
- geofft 7y ago
  It's buried a bit in the GitHub docs, but it looks like it runs two containerds. One is for Kubernetes. The other is for running administrative containers, including the API server for normal interaction with the host, a server that implements AWS's remote command protocol (enabled by default), and a container that runs sshd (disabled by default). Packages are built with RPM but RPM isn't used at runtime. Instead, the system is image-based and reboots for updates.
mxie-ca 7y ago
From the AWS Compliance Shared Responsibility Model: https://aws.amazon.com/compliance/shared-responsibility-model/ https://aws.amazon.com/compliance/shared-responsibility-mode... Operating system maintenance falls under the Customer responsibility side. With using this new OS, would this responsibility shift back to AWS?
- llarsson 7y ago
  Unlikely, I'd say. If you fail to upgrade when a new release is made, are they at fault? You'd need to look towards providers that specifically take on more responsibility like https://compliantkubernetes.com/ https://compliantkubernetes.com/ (disclaimer: I have worked at Elastisys, the company behind Compliant Kubernetes).
- acdha 7y ago
  No, although it might reduce your effort needed. AWS offers that responsibility shift under the Fargate ECS/EKS launch types, which might run this underneath.
rfrfee 7y ago
Given that Red Hat recently killed CoreOS, it's great to see new alternatives coming up. I cannot wait to give it a spin!
- pas 7y ago
  https://github.com/coreos/fedora-coreos-tracker https://github.com/coreos/fedora-coreos-tracker has some activity, but it's far from robust.
- ailideex 7y ago
  Not even once ... https://docs.fedoraproject.org/en-US/fedora-coreos/ https://docs.fedoraproject.org/en-US/fedora-coreos/
  - jbirronw 7y ago
    That first needs to prove itself in practice, so far it seems more like a desperate try to tie it to Fedora and have it catch up with the popularity in cloud of the likes of Ubuntu and to eventually have people paying by locking into RHEL CoreOS.
    - joana035 7y ago
      No, let's pay a premium and lock ourselves into a trillion dollars company's last day project instead :-)
- aplanas 7y ago
  There is MicroOS from openSUSE: https://en.opensuse.org/Kubic:MicroOS https://en.opensuse.org/Kubic:MicroOS
- CameronNemo 7y ago
  https://www.flatcar-linux.org/ https://www.flatcar-linux.org/
joana035 7y ago
I'm really sad that my comment was removed, not even the usual [flagged] edit can be seeing anymore.

joana035 7y ago

The blog post statements looks like FUD, and of course, are easy to echo. Is the telemetry enabled by default?

whalesalad 7y ago

> To improve security, there's no SSH server in a Bottlerocket image, and not even a shell. Consider my interest to be piqued.

lysium 7y ago

Thanks! I miss the part where it explains how it works. Is it all just containers?

geofft 7y ago
It's buried a bit in the GitHub docs, but it looks like it runs two containerds. One is for Kubernetes. The other is for running administrative containers, including the API server for normal interaction with the host, a server that implements AWS's remote command protocol (enabled by default), and a container that runs sshd (disabled by default). Packages are built with RPM but RPM isn't used at runtime. Instead, the system is image-based and reboots for updates.

mxie-ca 7y ago

From the AWS Compliance Shared Responsibility Model: https://aws.amazon.com/compliance/shared-responsibility-model/ https://aws.amazon.com/compliance/shared-responsibility-mode... Operating system maintenance falls under the Customer responsibility side. With using this new OS, would this responsibility shift back to AWS?

llarsson 7y ago
Unlikely, I'd say. If you fail to upgrade when a new release is made, are they at fault? You'd need to look towards providers that specifically take on more responsibility like https://compliantkubernetes.com/ https://compliantkubernetes.com/ (disclaimer: I have worked at Elastisys, the company behind Compliant Kubernetes).
acdha 7y ago
No, although it might reduce your effort needed. AWS offers that responsibility shift under the Fargate ECS/EKS launch types, which might run this underneath.

rfrfee 7y ago

Given that Red Hat recently killed CoreOS, it's great to see new alternatives coming up. I cannot wait to give it a spin!

pas 7y ago
https://github.com/coreos/fedora-coreos-tracker https://github.com/coreos/fedora-coreos-tracker has some activity, but it's far from robust.
ailideex 7y ago
Not even once ... https://docs.fedoraproject.org/en-US/fedora-coreos/ https://docs.fedoraproject.org/en-US/fedora-coreos/
- jbirronw 7y ago
  That first needs to prove itself in practice, so far it seems more like a desperate try to tie it to Fedora and have it catch up with the popularity in cloud of the likes of Ubuntu and to eventually have people paying by locking into RHEL CoreOS.
  - joana035 7y ago
    No, let's pay a premium and lock ourselves into a trillion dollars company's last day project instead :-)
aplanas 7y ago
There is MicroOS from openSUSE: https://en.opensuse.org/Kubic:MicroOS https://en.opensuse.org/Kubic:MicroOS
CameronNemo 7y ago
https://www.flatcar-linux.org/ https://www.flatcar-linux.org/

joana035 7y ago

I'm really sad that my comment was removed, not even the usual [flagged] edit can be seeing anymore.