shykes

71 ms·

721.
by shykes 13y ago
Upstream Debian is moving very aggressively to package Docker, so I think Ubuntu will automatically benefit from that in future releases. I'm not sure about exact timing though.
722.
by shykes 13y ago
More specifically, you currently can't run untrusted code as root in a linux namespace, which is the default backend for Docker. There is work underway to improve the situation in 3 ways: 1) in Docker, to support backends other than lx
723.
by shykes 13y ago
It's not necessary and we didn't go out of our way to get it. We just happened "for free" as a result of writing portable code, a clean client-server architecture and the appearance of the boot2docker project in the comm
724.
by shykes 13y ago
In your experience are bfs and samba really slow on a virtual network ? I have trouble imagining that it would sliw things down enough to be a problem.
725.
by shykes 13y ago
Another example is OpenVZ, which offers an alternative to lxc for Linux. It requires patching the kernel, but is considered solid enough that multiple VPS providers actually use OpenVZ under the hood. Note: there will probably be an OpenVZ
726.
by shykes 13y ago
Look for an update on this in 0.9 :) Future versions of the Docker API will natively support scoping . This means that each API client will see a different subset of the Docker engine depending on the credentials and origin of the connecti
727.
by shykes 13y ago
> name dropping companies running the risk of exposing their machines does not magically invalidate the specific examples I gave You're right. But what it does is provide anecdotical evidence that your views are not shared by a la
728.
by shykes 13y ago
> As Docker evolves, it would be great to have some kind of official resource to get suggestions for optimal workflows as new features become available Yes! We are trying to figure this out. Our current avenue for this is to dedicate a
729.
by shykes 13y ago
Our priority in the short term is definitely to focus on the Linux ABI and making it available on as many physical machines as possible. This is the reasoning behind our current OSX support, and support for more platforms coming soon. Longe
730.
by shykes 13y ago
> Unfortunately Docker prevents hosting environments from employing some of the most potent security mitigations added to Linux recently. You list various facts that are mostly correct, but your conclusion is wrong. Docker absolutely
731.
by shykes 13y ago
Hey, thanks for the report! We're tracking that issue on https://github.com/dotcloud/docker/issues/3952 and are working with the boot2docker folks to get a fix out asap.
732.
by shykes 13y ago
Hi Matt, you are not alone :) It turns out that shared folders are not a sustainable solution (independently of whether boot2docker supports them), so the best practices are converging towards this: 1) While developing, your dev environment
733.
by shykes 13y ago
Just to clarify on the OSX support: obviously we did not magically get Darwin to support linux containers. But we put together the easiest possible way to run Linux containers on a Mac without depending on another machine. We do this by com
734.
by shykes 13y ago
Check out the Docker blog, there are tons of examples of companies using it for themselves. https://blog.docker.io From memory there are presentations or blog posts by engineers at Ebay, Mailgun, Cloudflare, Spotify, RelateIQ, A
735.
by shykes 13y ago
A few more off the top of my head: Deis, Strider, Runnable, baremetal.io, stackmachine, dockify.
736.
by shykes 13y ago
Docker is built and tested with Docker :)
737.
by shykes 13y ago
> LXC is to Jail as Docker is to CBSD Yes, exactly.
738.
by shykes 13y ago
Not exactly. A more accurate comparison would be docker:linux :: cbsd:freebsd lxc:linux :: jails:linux docker:lxc :: cbsd:jails And if one day docker gets a jails execution driver: docker:freebsd :: cbsd:freebsd docker:jails :: cbsd:jails
739.
by shykes 13y ago
Docker and Jails are not directly comparable, the same way Docker and raw lxc are not directly comparable. Docker operates at a higher level of abstraction, and uses lxc as a low-level sandboxing tool. It could (and soon will) offer a choic
740.
by shykes 13y ago
> Dockerfiles are great and concise for apps (put files here, start by running this command, etc.). Chef/Puppet are great for pretty much the rest of the stack upwards. Packer comes into play there. You really don't need pack
741.
by shykes 13y ago
It's one thing to implement common sense progressive marijuana legislation, and probably quite another to make headlines as "the marijuana president" for possibly months in a row.
742.
by shykes 13y ago
If either of you wants to come hang on #docker and #docker-dev (freenode), we'll be happy to help you out with the integration!
743.
by shykes 13y ago
> The apps themselves are managed by various developers but we have standard things that we do across those servers, like install our monitoring agent, applying patches, configuring performance tweaks, etc. The problem with running Dock
744.
by shykes 13y ago
To answer your question, our priority is to make sure docker works great on every distro, large or small, old or new. As some of the answers below will show you, sysadmin-world is quite a fragmented place, and I don't think we should e
745.
by shykes 13y ago
We explain this in detail in the blog post: http://blog.docker.io/2014/01/docker-closes-15-m-series-b-fu...
746.
by shykes 13y ago
Yes :) We are working on pluggable execution drivers. The current driver (lxc) will be replaceable by eg. libvirt, plain chroot and eventually zones, jails etc. There is actually someone experimenting with Jails support already (can't
747.
by shykes 13y ago
Check out https://github.com/dotcloud/docker/blob/master/hack/MAINTAIN... And in general the rest of that hack/ directory. We use a process that is completely open and not at all limited to D
748.
by shykes 13y ago
No offense taken whatsoever. I agree it's an important and unsolved topic, and I myself still have a few old OpenBSD posters from my teenage years :) Having grown up in a family of "starving artists" like they say, I see a lo
749.
by shykes 13y ago
Very much open to!
750.
by shykes 13y ago
Happy to chat about it anytime, and please let me know if I can help! It should go without saying that I don't think this is the only route for supporting open-source. Linux comes to mind as perhaps the most successful open-source pr

More ›