3 ms·
> Immutable infrastructure removes a whole class of bugs. I'd like to see some examples of this.
by brodouevencode 4y ago
> Immutable infrastructure removes a whole class of bugs.
I'd like to see some examples of this.
- justin_oaks 4y agoImmutable infrastructure could prevent an idiot from 1) making changes in production 2) without performing automated testing first and 3) without adding the changes into source control. While I don't use immutable infrastructure myself, I can see it being of use in some organizations.
- fknorangesite 4y ago> prevent an idiot Doesn't have to be an idiot - just a normal, fallible human.
- justin_oaks 4y agoQuite right. I initially thought of someone who edits things in production as an idiot. But it could be someone who doesn't know any better, or whose management has them to do unwise things. We normal, fallible humans still benefit a lot from using good methods that take human error out of the equation.
- mdaniel 4y agoAsk and ye shall receive: https://news.ycombinator.com/item?id=35389882 https://news.ycombinator.com/item?id=35389882 We run Bottlerocket (previously Flatcar, nee CoreOS) which itself is running SSM for "break glass," so: only about 3 directories (and children) can physically be written to, no package manager, no sshd, and in Bottlerocket's case even getting to a shell on the host is so complicated I have it pinned in our slack channel. I haven't tolerated "general purpose" OSes for production machines in over 8 years because jokers just love to "just this one thing to troubleshoot..." exactly like the story above said
- lazyant 4y agoany manual undocumented change may lead to hard to debug problems, an example in these comments https://news.ycombinator.com/item?id=35389882 https://news.ycombinator.com/item?id=35389882