amouat

18 ms·

151.
by amouat 11y ago
Yes, I should have mentioned in the article that Swarm is still heavily under development. I'm still wondering if and how they're going to address the idea of co-scheduling groups of containers, like pods in Kubernetes. This is a
152.
by amouat 11y ago
Author here. I would say it's a bit more subtle than that. If you have a very large cluster (1000s of machines), Mesos may well be the best fit, as you are likely to want Mesos's support for diverse workloads and the extra assuran
153.
Swarm vs. Fleet vs. Kubernetes vs. Mesos(radar.oreilly.com)
205 points by amouat 11y ago|83 comments
154.
Swarm vs. Fleet vs. Kubernetes vs. Mesos(radar.oreilly.com)
11 points by amouat 11y ago|0 comments
155.
by amouat 11y ago
Did you mean ingenious? Or disingenuous?
156.
“I am a feminist, but…”(jpetazzo.github.io)
3 points by amouat 11y ago|0 comments
157.
by amouat 11y ago
Yeah, I agree. However this particular keyboard may or may not work for me. I like my Cherry MX keyboard but it would be good to try something more ergonomic.
158.
by amouat 11y ago
Because it's a scam. The publisher makes money by tricking libraries into buying the titles.
159.
by amouat 11y ago
I'd like to try one of these: http://keyboard.io . Fairly expensive though, so I'd want to try one before parting with cash.
160.
by amouat 11y ago
My primary school (UK) had desks with inkwells in the 80s. I have no idea when the inkwells had last been used. The idea of giving 4-11 yo kids ink seems crazy now.
161.
by amouat 11y ago
Sure. But you said "This is not true at all and a common fallacy". In fact, it is quite possible to reliably win when the odds offered are better than the actual odds. I guess we're just talking over each other - you made an
162.
by amouat 11y ago
Who said anything about raising bets?
163.
by amouat 11y ago
Those are still good odds and given enough bankroll you will win. Which of the cases in the article do you think disproves that?
164.
by amouat 11y ago
There's actually a project called Subuser https://github.com/subuser-security/subuser which uses Docker to secure desktop applications.
165.
by amouat 11y ago
There's no reason a Docker container has to run as root. The daemon does, but that's another issue.
166.
by amouat 11y ago
I submitted it, and that thought did cross my mind. However, I see someone has linked the papers with the original research in a comment which allows anyone curious to dig into the actual details. At any rate, it's always interesting t
167.
Web's random numbers are too weak, researchers warn(bbc.co.uk)
28 points by amouat 11y ago|47 comments
168.
by amouat 11y ago
Fully agree. That's why you should talk to the points and not make personal statements like "you shouldn't give advice".
169.
by amouat 11y ago
There's no need to say that at all. Just address the points and let everyone form their own opinions.
170.
by amouat 11y ago
It's more that containers haven't been proven secure than that they are inherently insecure, so I disagree with the blanket statement "it's possible to break out of containers". VMs have the advantage of shielding t
171.
by amouat 11y ago
> it's possible to break out of containers Prove it. I'm not saying it's impossible, but it's certainly not trivial. Also, take a look at what Joyent are doing with Triton.
172.
by amouat 11y ago
For a forum like this, it should go without saying that many of these problems are really opportunities for successful businesses. Containers are only going to grow in uptake; companies like Weave and ClusterHQ have a very bright future if
173.
by amouat 11y ago
I think you just need to provide a flat networking infrastructure where all nodes get their own IP and can reach each other. So you can swap flannel for project calico or your own setup if you like.
174.
by amouat 11y ago
Err, I'm missing the point of my own point? You raise an interesting point, but I don't think TDD was what stumped Ron. It's not a simple problem to solve without a lot of thought unless you have the requisite background know
175.
by amouat 11y ago
A lot was discussed about Norvig's elegant solution compared to Ron Jeffries effort and what it said about TDD: http://ravimohan.blogspot.co.uk/2007/04/learning-from-sudoku... To be fair, the reason Norvig wa
176.
by amouat 11y ago
"...used his botnet to steal data from the users of those computers on approximately 200,000,000 occasions" Must have some fast fingers to use nearly anything 200 million times...
177.
by amouat 11y ago
The official images aren't fixed in time, assuming you're pulling using a tag e.g redis:3.0. That image may be updated at any point and should be updated with minor patches and security updates. Rather than manually apply patches,
178.
Is Docker Safe for Production?(container-solutions.com)
7 points by amouat 11y ago|0 comments
179.
Docker Security Cheat Sheet(container-solutions.com)
7 points by amouat 11y ago|0 comments
180.
by amouat 11y ago
I've heard all those points mentioned, including by an accountant. Remember it is a points based system, not hard and fast rules. Agree about scare stories, but it is a scary topic.

More ›