3 ms·

What are you actually trying to do? I ask because I’m looking for a good tool to provision VMs on VMWare ESXi. That’s different though, Nomad won’t help me with

What are you actually trying to do? I ask because I’m looking for a good tool to provision VMs on VMWare ESXi. That’s different though, Nomad won’t help me with that. In my case we use Ansible and Puppet to orchestrate VMs. Puppet for the stuff all VMs need, and Ansible for deploying custom software. Given that we at the most have 8 VMs that are completely identical, Nomad makes very little sense.

edmcnulty101 5y ago
Why use configuration management over dockerfiles and images?
- nailer 5y ago
  Orchestration is more than just configuring individual instances, but rather being able to deploy your entire app which may include instances, load balancers, lambdas, data stores and/or other infrastructure.
  - edmcnulty101 5y ago
    No I mean why use Ansible and Puppet when you can create clean workloads from a docker image.
    - exdsq 5y ago
      They said they’re using VMs over Docker for better security control
      - edmcnulty101 5y ago
        Ah gotcha. Thanks. Missed that.
      - deivid 5y ago
        you can still export a container and run it as a vm with a bit of effort: https://blog.davidv.dev/docker-based-images-on-baremetal.html https://blog.davidv.dev/docker-based-images-on-baremetal.htm...
        exdsq 5y ago
        Interesting! I haven't used VMs in a while due to being fully sucked into the world of Docker, but isn't VM configuration at the point you can do something similar to a Dockerfile to run? Or is it easier to go from Dockerfile -> VM?
- mrweasel 5y ago
  We use Ansible to configure and deploy containers in many cases. Dockerfiles and container images aren’t really doing the same thing as configuration management.
kosolam 5y ago
In my case it’s a micro services architecture. We use vms over containers for elevated security. The goal is to automate production as much as possible.
- encryptluks2 5y ago
  Wouldn't something like KubeVirt be more ideal to handle these types of workloads then?
- tpetry 5y ago
  You could run them all on the same host and use docker with kata containers. The firecracker hypervisor was developed by aws to even run multiple tenants on the same host, so it should be very secure.

edmcnulty101 5y ago

Why use configuration management over dockerfiles and images?

nailer 5y ago
Orchestration is more than just configuring individual instances, but rather being able to deploy your entire app which may include instances, load balancers, lambdas, data stores and/or other infrastructure.
- edmcnulty101 5y ago
  No I mean why use Ansible and Puppet when you can create clean workloads from a docker image.
  - exdsq 5y ago
    They said they’re using VMs over Docker for better security control
    - edmcnulty101 5y ago
      Ah gotcha. Thanks. Missed that.
    - deivid 5y ago
      you can still export a container and run it as a vm with a bit of effort: https://blog.davidv.dev/docker-based-images-on-baremetal.html https://blog.davidv.dev/docker-based-images-on-baremetal.htm...
      - exdsq 5y ago
        Interesting! I haven't used VMs in a while due to being fully sucked into the world of Docker, but isn't VM configuration at the point you can do something similar to a Dockerfile to run? Or is it easier to go from Dockerfile -> VM?
mrweasel 5y ago
We use Ansible to configure and deploy containers in many cases. Dockerfiles and container images aren’t really doing the same thing as configuration management.

kosolam 5y ago

In my case it’s a micro services architecture. We use vms over containers for elevated security. The goal is to automate production as much as possible.

encryptluks2 5y ago
Wouldn't something like KubeVirt be more ideal to handle these types of workloads then?
tpetry 5y ago
You could run them all on the same host and use docker with kata containers. The firecracker hypervisor was developed by aws to even run multiple tenants on the same host, so it should be very secure.