3 ms·
Docker would probably be better as you don't have the huge VM overhead and is naturally reverts to it's original state.
by fleitz 13y ago
Docker would probably be better as you don't have the huge VM overhead and is naturally reverts to it's original state.
- MiguelHudnandez 13y agoI agree -- It's the same concept but much more efficient. I'd set up a docker to accept a single HTTP post with the document, and to return the thumbnail. The docker can then be shut down and a new instance spun up to wait for the next document to process. It might be wasteful to spin up a new docker for each instance, but it's the only way to prevent some exploit in LibreOffice[1] that might leak information somehow. A leak could be as terrible as embedding an entire document in the next thumbnail, or as simple as returning the wrong thumbnail (like from a previous request). [1] LibreOffice was the user-agent that phoned home in the article.