alsadi

13 ms·

91.
by alsadi 10y ago
Docker inc. is a key member of oci which is under linux foundation https://www.opencontainers.org/faq
92.
by alsadi 10y ago
Your meaning of everywhere is by having 3rd party non official repos that ship small copy of ubuntu core. Remind me why do steam do have to ship ubuntu's version of heavily patched libraries instead of using system upstrean version shi
93.
by alsadi 10y ago
We use ansible to generate small inremental updates of docker images. The ansible takes any base image and put it into desired state. We feed it a milestone image to generate a small layer over it. http://engineering.opensooq.com
94.
by alsadi 10y ago
Talking about ruby community, thread safty was too late it's only usable in ruby 2.x and rails v. 4. And even with rails v4 many apps are not thread safe like canvas lms because the long tail of rails addons that are not thread safe an
95.
by alsadi 10y ago
I belive doing typical oci-standard docker image suites portability and servers and sysadmin more than canonical's non-standard vendor lockins
96.
by alsadi 10y ago
Ruby is perl-minded folks reinventing python without understanding it. The result was: ruby is python-done wrong. Now comparing python flask uwsgi and jvm jetty apps are in favor of python in all metric. Starting a django elephant takes no
97.
Show HN: Redis dump/restore tool as lines of python literals(github.com)
3 points by alsadi 10y ago|0 comments
98.
by alsadi 10y ago
as you can see here "alsadi" user is a sudoer but later with oneway, he was unable to sudo again. http://imgur.com/a/IzrXR
99.
by alsadi 10y ago
the current process here mean "oneway" or "su" not the parent of it. so if you type "su -l -c sleep app" and type "ps ax" you would see a the "su" process and a child process. if you do that
100.
Show HN: Oneway drop privileges in a non-reversible way(github.com)
1 points by alsadi 10y ago|4 comments
101.
Show HN: Docker jumpshell is ready for the masses(github.com)
4 points by alsadi 10y ago|0 comments
102.
by alsadi 10y ago
ah, blogs are not allowed! I'll submit it normally.
103.
by alsadi 10y ago
I'll write a blog post about it and submit it.
104.
Docker jumpshell v1.5, now support mosh, and a group to access all containers(github.com)
3 points by alsadi 10y ago|3 comments
105.
Fedora discuss smaller hammers than “release blocking”(lists.fedoraproject.org)
1 points by alsadi 10y ago|0 comments
106.
Docker jumpshell v1.3 released – jailed ssh access to docker containers(github.com)
2 points by alsadi 10y ago|0 comments
107.
by alsadi 10y ago
I never like github approach, they alway use larger hammers
108.
by alsadi 10y ago
Yes I agree. There are some things you can do for example you can have client certificates, only trusted clients can talk to your ci, and onlt trusted clients can push images. Only dev with ssh keys can push code. Your ci and registry are l
109.
by alsadi 10y ago
You might as well drop privileges and tell the kernel to disallow any future privileges even with sudo/su or vulnerabilities. You can do this by using oneway in your docker entry point https://github.com/muayyad-alsadi&