3 ms·

> If your CI is doing more than 100 A limit of 100 pulls per 6 hours averages to a pull each 3 minutes. Each stage of a CICD pipeline uses more than 1 contain

by barumi 6y ago

> If your CI is doing more than 100 A limit of 100 pulls per 6 hours averages to a pull each 3 minutes. Each stage of a CICD pipeline uses more than 1 container image, and it's customary to have CICD stages build and pull from previous stages, such as integration tests,performance tests, canary tests, etc. I would dare say that you're doing something terribly wrong if you don't need to pull images often, because that largely tells you're doing barely any tests or deployments.

franga2000 6y ago
The only thing that is being limited are pulls from the Docker Hub. If you're doing integration tests for a bunch of microsevices, you might have some 20 upstream images that you need to pull. Those can stay in your cache until they are updated (which is rare and predictable, because you're pinning versions, right?). You do your building and testing and all that entirely on your "own" infrastructure and then you push once test succeds.
- barumi 6y ago
  > The only thing that is being limited are pulls from the Docker Hub. Yes. > If you're doing integration tests for a bunch of microsevices, you might have some 20 upstream images that you need to pull. Yes. > Those can stay in your cache until they are updated (which is rare and predictable, because you're pinning versions, right?). Not necessarily. You dockerize an app prior to running non-unit tests tests, and that image needs to be stored by a container registration service. With this change, Docker Hub's ceases to be that service. > You do your building and testing and all that entirely on your "own" infrastructure and then you push once test succeds. Nope, the point is that Docker Hub ceases to be relevant as a container registry. As long as you start to do all your work outside of Docker Hub, you won't need Docker Hub to do any of the work. You just get your base images from where you store your own container images and suddenly Docker Hub stops playing any role in your workflow, thus losing al relevance.
  - franga2000 6y ago
    It looks like you don't, but I've always seen Docker Hub as...well...a hub, not just any ol' registry. It's where people publish final builds of the images that they release to the world and others pull them from there. If you're using it for basically passing your own images between CI workers or whatever other workload that requires you to constantly be pushing and pulling, you should be paying them for it or hosting your own registry. If you're in a situation where having your own registry means Docker Hub "loses all relevance", then you're probably not the kind of user they have any reason to care about (and that's nonsense anyway, because you'll still almost certainly be using 3rd party images from there).
    - barumi 6y ago
      > It looks like you don't, I'm sorry to say but your insistence of speaking out of a position of blisful ignorance and your refusal to open your eyes does not change the world around you. > but I've always seen Docker Hub as...well...a hub, not just any ol' registry. No one with the faintest cursory knowledge of Docker would ever claim that Docker Hub is anything other than a docker registry. Docker itself advertises Docker Hub as a service "to create, manage, and deliver your teams' container applications." Docker itself describes Docker Hub as a "cloud-based application registry and development team collaboration services." That's their own official marketing slogan, taken straight out of their "Why Docker" page. And even that you managed to miss and failed to understand. > It's where people publish final builds It really isn't. That's not how containers work at all, and that's not how Docker promotes the service, and that's not how anyone uses it. Nothing in your comments is even remotely compatible with basic notions of CICD. Apparently you're so out of touch with containerization and CICD and devops workflow that you're even entirely ignorant of basic concepts like what a latest tag is supposed to represent and how tags are used to update apps. The fact that you try to pass off that absurd assertion in such absolute terms makes it quite clear that you have absolutely no idea about what you're talking about. Hell, your claim can only possibly be made by someone who never even registered a user account in Docker Hub. Please refrain from speaking about stuff you know nothing about. > If you're using it for basically passing your own images between CI workers or whatever other workload that requires you to constantly be pushing and pulling This mindless statement just makes it clear as water that you have no idea of how containers are used. At all. And yet here you are degrading the signal/noise ratio by blabbering about stuff you know nothing about.
benmmurphy 6y ago
we hit this because we are using AWS codebuild and the public ips are presumably reused between different builds.

by barumi 6y ago

franga2000 6y ago

The only thing that is being limited are pulls from the Docker Hub. If you're doing integration tests for a bunch of microsevices, you might have some 20 upstream images that you need to pull. Those can stay in your cache until they are updated (which is rare and predictable, because you're pinning versions, right?). You do your building and testing and all that entirely on your "own" infrastructure and then you push once test succeds.

barumi 6y ago
> The only thing that is being limited are pulls from the Docker Hub. Yes. > If you're doing integration tests for a bunch of microsevices, you might have some 20 upstream images that you need to pull. Yes. > Those can stay in your cache until they are updated (which is rare and predictable, because you're pinning versions, right?). Not necessarily. You dockerize an app prior to running non-unit tests tests, and that image needs to be stored by a container registration service. With this change, Docker Hub's ceases to be that service. > You do your building and testing and all that entirely on your "own" infrastructure and then you push once test succeds. Nope, the point is that Docker Hub ceases to be relevant as a container registry. As long as you start to do all your work outside of Docker Hub, you won't need Docker Hub to do any of the work. You just get your base images from where you store your own container images and suddenly Docker Hub stops playing any role in your workflow, thus losing al relevance.
- franga2000 6y ago
  It looks like you don't, but I've always seen Docker Hub as...well...a hub, not just any ol' registry. It's where people publish final builds of the images that they release to the world and others pull them from there. If you're using it for basically passing your own images between CI workers or whatever other workload that requires you to constantly be pushing and pulling, you should be paying them for it or hosting your own registry. If you're in a situation where having your own registry means Docker Hub "loses all relevance", then you're probably not the kind of user they have any reason to care about (and that's nonsense anyway, because you'll still almost certainly be using 3rd party images from there).
  - barumi 6y ago
    > It looks like you don't, I'm sorry to say but your insistence of speaking out of a position of blisful ignorance and your refusal to open your eyes does not change the world around you. > but I've always seen Docker Hub as...well...a hub, not just any ol' registry. No one with the faintest cursory knowledge of Docker would ever claim that Docker Hub is anything other than a docker registry. Docker itself advertises Docker Hub as a service "to create, manage, and deliver your teams' container applications." Docker itself describes Docker Hub as a "cloud-based application registry and development team collaboration services." That's their own official marketing slogan, taken straight out of their "Why Docker" page. And even that you managed to miss and failed to understand. > It's where people publish final builds It really isn't. That's not how containers work at all, and that's not how Docker promotes the service, and that's not how anyone uses it. Nothing in your comments is even remotely compatible with basic notions of CICD. Apparently you're so out of touch with containerization and CICD and devops workflow that you're even entirely ignorant of basic concepts like what a latest tag is supposed to represent and how tags are used to update apps. The fact that you try to pass off that absurd assertion in such absolute terms makes it quite clear that you have absolutely no idea about what you're talking about. Hell, your claim can only possibly be made by someone who never even registered a user account in Docker Hub. Please refrain from speaking about stuff you know nothing about. > If you're using it for basically passing your own images between CI workers or whatever other workload that requires you to constantly be pushing and pulling This mindless statement just makes it clear as water that you have no idea of how containers are used. At all. And yet here you are degrading the signal/noise ratio by blabbering about stuff you know nothing about.

benmmurphy 6y ago

we hit this because we are using AWS codebuild and the public ips are presumably reused between different builds.