kylequest

18 ms·

91.
by kylequest 11y ago
Yes, I'm one of the authors. If you want to contribute too it'll be awesome and it'll be greatly appreciated! The quoted numbers are based on the set of sample apps you can find in the repository. Take a look in sample/a
92.
How to complain about Go(divan.github.io)
2 points by kylequest 11y ago|0 comments
93.
by kylequest 11y ago
The package ecosystem is the biggest challenge for Alpine. It's just not there and there's only so much you can do yourself. You need to have enough critical mass before the majority of the 3rd party providers begin to release pac
94.
by kylequest 11y ago
I didn't mean to say Alpine is the best host OS option. It's just it's a better idea compared to Ubuntu :-)
95.
by kylequest 11y ago
It sure would be nice if everything was working according to the standards :-)
96.
by kylequest 11y ago
Alpine is pretty nice though using it in containers you are not getting the best part of it: the hardened kernel. I'd say Alpine is a better fit for the host OS where you have a few moving parts. It will be great for compiled language
97.
by kylequest 11y ago
By the way, you can use DockerSlim [1] to auto-generate custom seccomp profiles (in addition to shrinking your image). They are already usable, but they can be improved. Any enhancements or ideas are appreciated. [1] http://docke
98.
by kylequest 11y ago
Alpine is an option in some cases, but, like you said, it's not always straight forward. Native application modules, 3rd party OS packages and the overall package echosystem differences are important factors that need to be considered.
99.
by kylequest 11y ago
Yes, it does have a package manager, but... , like you said, it's not as complete and it is different, which means you need to put in extra efforts to convert and make things work (also don't forget about a potential lib C compati
100.
by kylequest 11y ago
> Yes, today most people who use Docker build containers with unnecessary distro bits in them. >... to move away from a heavyweight distro like fedora or ubuntu, to something like alpine or even more minimalistic. The distro package m
101.
Engineering Managers Should Code 30% of Their Time(drdobbs.com)
4 points by kylequest 11y ago|0 comments
102.
by kylequest 11y ago
Yep, they do run each customer's containers in separate VMs. It's actually bring own VM kind of design :-) You configure your own EC2 instances, install ECS agents...
103.
by kylequest 11y ago
> "...security problems plaguing modern security products." Not sure what your definition of modern is, but this is a pretty old school "support interface".
104.
by kylequest 11y ago
It's easy to point out the places where you could've done a bit more optimization after the fact. And, yes, sometimes those optimizations don't cost an arm and a leg, but it's very easy to fall into the premature optimiz
105.
by kylequest 11y ago
Pretty often it's also a sign that Scrum and DSMs have been imposed on the team by their managers and/or PMs. Scrum is meant to be a tool for the dev team to self-organize. When it's not a bottom up effort (coming from the de
106.
by kylequest 11y ago
"better communication" and "cross training" are the biggest misconceptions about the stand-ups. A good/proper standup is short and there's no way to communicate and exchange enough detailed information and cont
107.
by kylequest 11y ago
If you like Alphine and it works for you great, but it's not always an option. If you use Ubuntu and you still want small containers there are a number of options. DockerSlim ( http://dockersl.im ) is one of these options. A
108.
by kylequest 11y ago
You shouldn't even need an account... unless you want to enable advanced features. Access to your location and maybe your address book should be enough. I deleted Cortana on my phone as soon as it asked me to login with a Microsoft acc
109.
What We Talk About When We Talk About Distributed Systems(videlalvaro.github.io)
4 points by kylequest 11y ago|0 comments
110.
Introduction to Apache Flink for Spark Developers: Flink vs. Spark(blog.madhukaraphatak.com)
1 points by kylequest 11y ago|0 comments
111.
Wagl: Service Discovery for Docker Swarm(ahmetalpbalkan.com)
2 points by kylequest 11y ago|0 comments
112.
by kylequest 11y ago
> Most containers are built on top of full OS images, with a full OS image's worth of vulnerabilities This is one of the problems DockerSlim ( http://dockersl.im ) is trying to address. You take those containers built on f
113.
Self-Organizing Maps with Google’s TensorFlow(codesachin.wordpress.com)
4 points by kylequest 11y ago|0 comments
114.
Lucky Microseconds: A Timing Attack on Amazon's S2n Implementation of TLS(eprint.iacr.org)
1 points by kylequest 11y ago|0 comments
115.
Apache Eagle – Hadoop Security Framework from EBay(eagle.incubator.apache.org)
4 points by kylequest 11y ago|0 comments
116.
by kylequest 11y ago
It definitely has some nice ideas, but it's very mechanical and dry. It lacks heart when it comes the people side... There's only so much you can get out of people when they are just subordinates to you.
117.
Chrome intends to deprecate DHE-based cipher suites(groups.google.com)
2 points by kylequest 11y ago|0 comments
118.
by kylequest 11y ago
Yes, it is open sourced. I think it's different though. It looks like the "squashed image" feature flattens an image. DockerSlim tries to extract only the artifacts the application needs, so it can turn a 431 MB image into a
119.
by kylequest 11y ago
Cool project! Detecting installed packages and checking against known vulnerabilities is definitely useful. A similar feature is on the todo list for DockerSlim[1], so it'll be nice to reuse relevant bits and pieces. [1]DockerSlim was
120.
Hyperbahn – Service discovery and routing for large-scale microservice ops by Uber(github.com)
1 points by kylequest 11y ago|0 comments

More ›