5 ms·

Note that I said "Docker container". And that's an oversimplification, but from the article: > Docker containers have been deliberately designed to contain ju

by gwd 4y ago

Note that I said "Docker container". And that's an oversimplification, but from the article: > Docker containers have been deliberately designed to contain just one application. One container - one Nginx; one container - one Python web server; one container - one daemon. The lifecycle of a container would be bound to the lifecycle of that application. And running an init process like systemd as a top-level entrypoint was specifically discouraged. My guess is that the goal of this is to leave "lifecycle" issues at the container boundary. If you put nginx and your golang webapp in the same container, and one of them crashes, Docker / kubernetes you have to have logic inside the container to detect that and restart the correct one. If the goal is to have Docker / Kubernetes is to take care of all that for you, making it one thing per container is the best option.

mr_toad 4y ago
> If you put nginx and your golang webapp in the same container, and one of them crashes, Docker / kubernetes you have to have logic inside the container to detect that and restart the correct one. If the proxy only serves the app you can just shrug and restart the container. If the proxy and the web app are both stateless it shouldn’t matter. What you don’t want to do is mix stateless processes with statefull services, or have intertwined dependencies.
lamontcg 4y ago
> And running an init process like systemd as a top-level entrypoint was specifically discouraged. I spent years abusing docker to run images with systemd in them to test system configuration management tools running as many processes as you like. Once you hit it hard enough with a wrench you can make it do that just fine. Makes it very easy and extremely quick to test things in docker containers on your laptop which are meant to eventually wind up on VMs/metal. Horrible things like entire RHEL distros running systemd in one docker image... "I watched C-beams glitter in the dark near the Tannhäuser Gate..."

by gwd 4y ago

mr_toad 4y ago

> If you put nginx and your golang webapp in the same container, and one of them crashes, Docker / kubernetes you have to have logic inside the container to detect that and restart the correct one. If the proxy only serves the app you can just shrug and restart the container. If the proxy and the web app are both stateless it shouldn’t matter. What you don’t want to do is mix stateless processes with statefull services, or have intertwined dependencies.

lamontcg 4y ago

> And running an init process like systemd as a top-level entrypoint was specifically discouraged. I spent years abusing docker to run images with systemd in them to test system configuration management tools running as many processes as you like. Once you hit it hard enough with a wrench you can make it do that just fine. Makes it very easy and extremely quick to test things in docker containers on your laptop which are meant to eventually wind up on VMs/metal. Horrible things like entire RHEL distros running systemd in one docker image... "I watched C-beams glitter in the dark near the Tannhäuser Gate..."