shykes

22 ms·

271.
by shykes 9y ago
Marketing. There's a long tradition by enterprise vendors large and small to market someone else's product as insecure, in order to create demand for their "improved, secured" version. In this particular instance, Twistl
272.
by shykes 9y ago
> What's your point? In Silicon Valley, affiliation to established institutions - schools, conglomerates, social circles - correlates with access to early-stage capital much more strongly than it correlates with actual performance
273.
by shykes 9y ago
I don't know about successful - Docker still has to prove that it can build a large sustainable business. Obviously I am bullish on the opportunity :) I definitely was a complete outsider when I moved to Silicon Valley: first generat
274.
by shykes 9y ago
> [...] the sentence "VCs want to see revenue and customers or prestige" is completely reasonable. It's reasonable when prestige is earned through individual achievements. But most of the time it's earned through af
275.
by shykes 9y ago
I am not convinced. Many sovereign nations will think twice before handing a foreign corporation the keys to their mass transportation industry. They will have the motivation, and the means, to keep manufacturers in check, and play them off
276.
by shykes 9y ago
I think the China/US rivalry will guarantee that there will always be at the very least one major rival to Waymo with global ambitions.
277.
by shykes 9y ago
> The Docker company line seems to be that Swarm has been and will continue to be faster-evolving than Kubernetes Not exactly. Kubernetes has a much larger development community than Swarm, and therefore its overall development through
278.
by shykes 9y ago
You're correct that Kubernetes 1.3 introduced a "secrets" API resource, but it was backed by a naive implementation which did not encrypt secrets at rest. This made it impractical for production. Encryption at rest was introd
279.
by shykes 9y ago
It's quite possible that the US military is a bigger polluter than any private corporation or government agency. It's an organization of truly colossal size. But the sum of all US corporations is, in aggregate, much, much larger.
280.
by shykes 9y ago
I am a big fan of both Upspin and Keybase. In my view they are quite different. 1) Polish vs Openness: - Keybase is a polished product and a closed identity platform; - Upspin is open-source plumbing and an (almost) open platform. 2) Focus
281.
by shykes 9y ago
Correct :)
282.
by shykes 9y ago
A good starting point is the archive of Dockercon talks, we've had quite a few enterprise customers come on stage to describe their production deployments. Or check out the customers section on docker.com.
283.
by shykes 9y ago
Swarm has a very special role, because it's custom-built to integrate in the Docker platform. Because it's so specific, it has a smaller standalone community than Kubernetes, but it makes up for it in focus and speed. You should e
284.
by shykes 9y ago
We're going to support Linux also. But we want to careful not to disrupt the users of the original container engine, as we transition it to Moby. In the future there will be a cleaner separation between "Docker CE, the developer t
285.
by shykes 9y ago
It's extremely valuable for large IT organizations. Most of them have at least one deployment of each orchestrator, because of the proliferation of container projects in their various teams. They are very eager to adopt a single platfo
286.
by shykes 9y ago
You can disable Swarm or Kubernetes at will in each Docker EE cluster. Hybrid is very useful for enterprises who already have to manage both - it was a highly requested feature.
287.
by shykes 9y ago
Docker for Mac has a default filesystem configuration that offers maximum consistency at the expense of performance. Unfortunately in some configurations that can result in "throw computer out the window" frustration, depending on
288.
by shykes 9y ago
> I wish it was more modular and less of it ran privileged/as root Under the hood Docker has been heavily modularized. Check out https://containerd.io which handles all the low-level container operations in a lightweig
289.
by shykes 9y ago
> especially as a company that has a reputation for producing unstable APIs that break between minor versions. I wish people stopped repeating this without verifying it first. Here is a list of past breaking changes in the Docker API:
290.
by shykes 9y ago
Maybe I'm the exception, but I invested in filecoin because I'm excited about IPFS and believe coin-incentivized storage would be a very powerful feature and something I would love to spend my week-ends hacking on. I'm also a
291.
by shykes 9y ago
I think I posted a little too late. A good reminder of how much is left to chance in a launch :)
292.
by shykes 9y ago
Docker is doing pretty well. It was a HN-only launch.
293.
by shykes 9y ago
Docker uses a separate project called containerd to implement OCI: https://github.com/containerd/containerd Containerd itself is not at all Docker-specific, you can use it independently for anything that requires trans
294.
by shykes 9y ago
In my experience founders taking a 5-10k check often do it as a favor to an advisor they like and who can't afford to invest more. Maybe the advisor helped them out in the past, or their personal brand or connection are relevant to the
295.
by shykes 9y ago
Is that true even when taking into account the possibility of WeChat wanting to expand globally? If that's the case, being shut out of iOS seems like it would be an unsurmountable obstacle.
296.
by shykes 9y ago
Yes, that possibility is often on my mind. When we made the decision, Docker was the target of loud and vitriolic criticism in parts of the open-source community. In our experience the vitriol, even if it comes from a small minority, can sp
297.
by shykes 9y ago
A small anecdote in memory of Ian. When he joined Docker it was to help us make the platform more open and community-friendly. He died before completing his project and we've done our best to continue it in the way he would have wanted
298.
by shykes 9y ago
In this context it means preserving the default behavior of running the command specified in the image as PID 1, and not injecting any extra processes in the namespace. The difference in the runtime environment is subtle, but some applicati
299.
by shykes 9y ago
It's up to the Kubernetes developers to decide if they want to use that feature of Docker, yes.
300.
by shykes 9y ago
The zombie reaping problem is fixed in Docker. You can simply use `docker run --init` with no argument, and it will spawn a tiny init that will reap children processes correctly. We don't enable the flag by default to respect backwards

More ›