ian-lewis

7 ms·

1.
by ian-lewis 7y ago
Rather that the contain/don't-contain dichotomy, what's more important is gVisor's design principle that it always has 2 layers of isolation from the host and doesn't rely on any one bug in the Linux kernel, sentry,
2.
by ian-lewis 7y ago
There's a blub on "why Go?" on the website if you're interested. https://gvisor.dev/docs/architecture_guide/ > gVisor is written in Go in order to avoid security pitfalls that can plague ker
3.
Container Runtimes Part 4: Kubernetes Container Runtimes and CRI(ianlewis.org)
2 points by ian-lewis 8y ago|0 comments
4.
The Kubernetes Pause Container(ianlewis.org)
4 points by ian-lewis 9y ago|0 comments
5.
How to Do Blue/Green Deployments on Kubernetes(ianlewis.org)
3 points by ian-lewis 9y ago|0 comments
6.
What Are Kubernetes Pods Anyway?(ianlewis.org)
1 points by ian-lewis 9y ago|0 comments
7.
How Kubeadm Initializes Your Kubernetes Master(ianlewis.org)
1 points by ian-lewis 10y ago|0 comments
8.
by ian-lewis 10y ago
That's fair. As the reader you can be the judge. Advocacy is partly about inspiring others and I think this does that while presenting an accurate representation of what the farmer was able to accomplish.
9.
by ian-lewis 10y ago
Sure. It's just that we can't make it more genuine or plausible by writing it that way because it's not true.
10.
by ian-lewis 10y ago
* Disclosure: I work for Google with the OP, and sit next to him in Japan. "2. Google dispatched their solutions architect to work with them." That's not what happened at all. He built the system entirely himself before getti
11.
by ian-lewis 10y ago
Theoretically, you could make this work with any DNS provider with an API. Much the same way that lego does: https://github.com/xenolf/lego/tree/master/providers/dns AFIACT you still have to configu
12.
by ian-lewis 10y ago
The logic that lego has could certainly be coopted here but having a declarative config for the certificate using ThirdPartyResource is the right way to go IMHO. Also, lego is a bit cumbersome to run in a container. It relies on storing con
13.
Google Cloud Platform HTTP Load Balancers Explained via the CLI(ianlewis.org)
1 points by ian-lewis 10y ago|0 comments
14.
Why I Joined Google(ianlewis.org)
1 points by ian-lewis 11y ago|0 comments
15.
by ian-lewis 12y ago
That seems correct. He discovered it while creating the coq specification but coq wasn't itself used to discover the bug. He confirmed that much in this podcast (It's in Japanese though): http://mozaic.fm/post&#x2