amouat

11 ms·

31.
by amouat 3y ago
I work at Chainguard. In a nutshell we produce minimal container images with a low CVE count. In many cases they should be drop in replacements for the containers you are currently using. This is particularly useful if your team uses a scan
32.
by amouat 3y ago
Wolfi packages are served from https://packages.wolfi.dev/os which can be used with apk tools or apko. The built Chainguard images are all on the cgr.dev registry. Wolfi is completely OSS. The policies regarding Chainguard
33.
by amouat 3y ago
I'm very sorry that we broke things for you. To be clear, nothing has changed with Wolfi. Wolfi is an open source community project and everything is still available there: https://github.com/wolfi-dev/ . We have m
34.
by amouat 3y ago
You might want to check out Wolfi and Chainguard Images. Wolfi is a Linux distro that we use to build minimal images that are roughly comparable to Alpine in size but, everything is compiled from source against glibc. Our images come withou
35.
by amouat 3y ago
I loved this book! It's about much simpler, generally turn based games though
36.
by amouat 3y ago
We needed Wolfi to be able to create minimal (distroless if you like) container images based on glibc with 0 vulnerabilities. Turns out a lot of other people are interested in Wolfi for various reasons, and we're more than happy to wor
37.
by amouat 3y ago
I think it's more subpackages such as -dev, -lib and -doc variants. These are defined as part of the parent package but count as distinct packages.
38.
by amouat 3y ago
Yeah, it's definitely not a platform for running containers. Apologies for any confusion there. But regarding being a full linux distro, we're really just missing the kernel and I could see that happening at some point in the futu
39.
by amouat 3y ago
99% of Wolfi is the package repository. We've compiled all the software to run an OS from source against glibc and made it available as APKs (apart from the kernel). The major use case for this is composing container images using tools
40.
by amouat 3y ago
You're welcome to join the regular community meeting: https://github.com/wolfi-dev/community We do fully intend for wolfi to be a community project, but it will take some time. We do say on the home page: >What
41.
by amouat 4y ago
Just to be clear, the official images are definitely not at risk, and I say that as a Docker captain. Official images are hugely important to Docker, now and going forward.
42.
Building the first memory safe distro(chainguard.dev)
2 points by amouat 4y ago|0 comments
43.
by amouat 4y ago
I set up a "notes" contact on whatsapp. I had to invite someone then immediately kick them out, so it's just me. But it makes a nice easy way to jot stuff down on the run without requiring a separate app.
44.
by amouat 4y ago
That's big! Theoretically you can make a lot of money on the spread ("beware picking up pennies in front of a streamroller")
45.
Minimal Container Images: Towards a More Secure Future(blog.chainguard.dev)
1 points by amouat 4y ago|0 comments
46.
by amouat 4y ago
One of the major benefits of Rust is that it isn't garbage collected. I'm not sure of the current status of GC support in WASM, but it used to mean that to compile something like Go to WASM also meant including a full GC implement
47.
by amouat 4y ago
If this is related to musl or DNS, we are planning to add glibc base images which should address those issues.
48.
by amouat 5y ago
Have a look at Patterns of Software by Richard Gabriel https://www.dreamsongs.com/Files/PatternsOfSoftware.pdf It's not so much that Alexander has thoughts on software but that others realised they could draw clea
49.
Kontain – Run Containers in Unikernels(github.com)
2 points by amouat 5y ago|0 comments
50.
by amouat 5y ago
It's worth looking at https://kontain.app/ - seems to address a lot of the mentioned pain points in the article.
51.
by amouat 5y ago
So I largely agree, but it's not that "other people are hellish", it's that they are, in fact, hell. Satre is using the word hell to mean "the afterlife" i.e. we live on in other people's minds and opinion
52.
Predictions for the Future of Computing(blog.container-solutions.com)
8 points by amouat 5y ago|0 comments
53.
by amouat 6y ago
I don't think they owned the wallet, so they couldn't make outgoing transactions. I assume they didn't want to use a wallet they did control in case it could be used to identify them.
54.
by amouat 6y ago
And for anyone (like me) that thought, "ok that's fair enough, what's the problem?", the issue is that it could also be interpreted as generic arguments. A full explanation of the ambiguity is in the linked issue: le
55.
by amouat 6y ago
More or less. I don't think they even argue about the economics of it any more. As long as they can blame somebody else (the EU, remainers, the global situation) they will be happy. They want to mould the UK into their own vision and d
56.
The Container Solutions Opinionated Guide to Blogging(blog.container-solutions.com)
1 points by amouat 6y ago|0 comments
57.
by amouat 6y ago
"oxter". It's a common word in Shetland (island to the north of Scotland), less so on the mainland.
58.
by amouat 7y ago
There's usually some reference, but it can be a bit cryptic. All the Docker books have a whale.
59.
by amouat 7y ago
I'm not sure that's true. GKE is still using Docker at least. It will move to containerd in the next few versions I expect.
60.
by amouat 7y ago
There's a bit more here, but it doesn't really say much: https://www.docker.com/blog/docker-next-chapter-advancing-de...

More ›