5 ms·

Hello! This website is a proof of concept with a simple Memcached SaaS. It is my final project for cs50x that ended this sunday. Please tell me what you think

Hello! This website is a proof of concept with a simple Memcached SaaS. It is my final project for cs50x that ended this sunday. Please tell me what you think :) + You can read the how-to on SlideShare: http://www.slideshare.net/julienbarbier42/building-a-saas-using-docker http://www.slideshare.net/julienbarbier42/building-a-saas-us... + You can see the source on GitHub: https://github.com/jbarbier/SaaS_Memcached https://github.com/jbarbier/SaaS_Memcached

adamnemecek 13y ago
What has been your experience with docker? I've been meaning to check it out but did not get around to it yet.
- julien421 13y ago
  Hey! I've been playing with docker for a few weeks now for this project. I started working on my project using LXC & AUFS, but then switched to Docker when it was released. Frankly it made my life much easier because getting LXC and AUFS to do what you want can be pretty hardcore.
  - contingencies 13y ago
    Consider trying LVM2 snapshots instead of AUFS.
chrisfarms 13y ago
Fun little project. Well done. Giving a public facing application sudo powers (even limited ones) is a little scarey. If I understood your documentation I believe if I somehow got onto your box I could escalate to root just by editing your iptables scripts. You probably want to ensure www-data (or anyone) cannot write to these files :-)
- julien421 13y ago
  ouch! thank you! :) let's -w!
  - chrisfarms 13y ago
    Here's a nice comment on some of the dangers of setuid/sudo on shell scripts. The more you know... http://unix.stackexchange.com/questions/364/allow-setuid-on-shell-scripts/2910#2910 http://unix.stackexchange.com/questions/364/allow-setuid-on-...
    - julien421 13y ago
      Thank you Chris. So a better way would be a compile an executable instead of using a shell script?
      - shykes 13y ago
        Or run the webapp itself inside a docker container? :)
ovi256 13y ago
Great work Julien, keep it up :)

adamnemecek 13y ago

What has been your experience with docker? I've been meaning to check it out but did not get around to it yet.

julien421 13y ago
Hey! I've been playing with docker for a few weeks now for this project. I started working on my project using LXC & AUFS, but then switched to Docker when it was released. Frankly it made my life much easier because getting LXC and AUFS to do what you want can be pretty hardcore.
- contingencies 13y ago
  Consider trying LVM2 snapshots instead of AUFS.

chrisfarms 13y ago

Fun little project. Well done. Giving a public facing application sudo powers (even limited ones) is a little scarey. If I understood your documentation I believe if I somehow got onto your box I could escalate to root just by editing your iptables scripts. You probably want to ensure www-data (or anyone) cannot write to these files :-)

julien421 13y ago
ouch! thank you! :) let's -w!
- chrisfarms 13y ago
  Here's a nice comment on some of the dangers of setuid/sudo on shell scripts. The more you know... http://unix.stackexchange.com/questions/364/allow-setuid-on-shell-scripts/2910#2910 http://unix.stackexchange.com/questions/364/allow-setuid-on-...
  - julien421 13y ago
    Thank you Chris. So a better way would be a compile an executable instead of using a shell script?
    - shykes 13y ago
      Or run the webapp itself inside a docker container? :)

ovi256 13y ago

Great work Julien, keep it up :)