shykes

94 ms·

1. 901.▲
   by shykes 13y ago

   Thanks! Out of curiosity, what's your reasoning for preferring a custom repo instead of a PPA?
2. 902.▲
   by shykes 13y ago

   Hi everybody, this is quite a monster of a release: 378 commits by 40 different people :) Here's the full release pull request if you're interested: https://github.com/dotcloud/docker/pull/1628
3. 903.▲
   by shykes 13y ago

   That's a good point! The website is maintained separately from the rest of the project so I don't have direct visibility over it (I'm the lead maintainer of docker). I should have checked this earlier. Thank you!
4. 904.▲
   by shykes 13y ago

   > Perhaps OS virtualization is a new technology for you [...] some of us have been doing this for a while Your comment makes a fair point, but it's really diminished by your condescending tone.
5. 905.▲
   by shykes 13y ago

   Sure - for openvz it was more powerful resource accounting and limits (this is back in 2008). I think there was extra goodness around networking, but honestly I can't remember. Mostly we were trying to figure out which project would fi
6. 906.▲
   by shykes 13y ago

   I understand your point, and I agree it's an important conversation to have. I'll be happy to chat about it on #docker anytime!
7. 907.▲
   by shykes 13y ago

   To clarify, I'm talking about our use of containers at dotCloud , which is a multi-tenant environment. Docker _does_ allow running processes as root inside a container, and it also allows dropping privileges to the uid of your choic
8. 908.▲
   by shykes 13y ago

   Hi, just to re-iterate my comment above: we absolutely care about security and welcome all security-related discussions. For example, just last week we released a hotfix to address an entirely different security concern [1]. If you feel tha
9. 909.▲
   by shykes 13y ago

   Good question - no, we don't. Developers can request for certain whitelisted commands to be executed within an environment that we know to be safe. For example, you can specify a list of system packages, and dotcloud will install them
10. 910.▲
    by shykes 13y ago

    For those of you familiar with Docker ( http://docker.io ): CoreOS is a linux distribution designed to get your machine from zero to Docker as quickly and reliably as possible. It is stripped down to the bare minimum, since its pr
11. 911.▲
    by shykes 13y ago

    Hi, docker maintainer here. There's a reason we keep saying docker is not yet production-ready. Right now our focus is on usability and stabilizing the management API to make deployment-centric deployment awesome. You can be sure that
12. 912.▲
    by shykes 13y ago

    Speaking for Docker: it's true that we've only released packages for Ubuntu, but we've been working on a Debian package as well. Starting in 0.6 we expect to offer both in parity. On a practical note, we are forced to maintai
13. 913.▲
    by shykes 13y ago

    > Could you share some thoughts (or links) on the differences between LXC and linux-vserver? vserver, lxc and openvz were 3 competing projects to add process-level isolation to the linux kernel. We used all 3 of them extensively (the a
14. 914.▲
    by shykes 13y ago

    If anything, it's needed for the development of docker itself. We already build docker with docker ( https://github.com/dotcloud/docker/blob/master/Dockerfile ), but we can't yet test docker
15. 915.▲
    by shykes 13y ago

    And now "Cocaine", apparently! https://news.ycombinator.com/item?id=6226993
16. 916.▲
    by shykes 13y ago

    Hi seiji, I'm the author of Docker. There is hype around docker, for sure. The optimist in me likes to think that it's because people find the project useful and are excited about the possibilities of containers in general - which
17. 917.▲
    by shykes 13y ago

    I will add that Docker is getting an architecture upgrade, and in the future will support nesting :)
18. 918.▲
    by shykes 13y ago

    The big difference with just scripts is that you can "freeze" the state of your deployment with strong guarantees that 1) it will not change and 2) it will behave the same way across machines. Another advantage of containers is th
19. 919.▲
    by shykes 13y ago

    Here's what I answered on stack overflow: Docker is not a replacement for lxc. "lxc" refers to capabilities of the linux kernel (specifically namespaces and control groups) which allow sandboxing processes from one another, a
20. 920.▲
    by shykes 13y ago

    If you have the luxury to choose from multiple committed investors (and I recommend you triple-check your assumption that these people are indeed committed), then I would use that leverage to set the bar for your ideal terms. Importantly, t
21. 921.▲
    by shykes 13y ago

    > If committed investors raise the valuation of a startup, would it make sense for a startup to offer a slightly-sweetened valuation for the first investor to commit? That is exactly what I did when raising seed money for dotCloud. It
22. 922.▲
    by shykes 13y ago

    I've been using ascii.io for a while - I would be interested in a comparison between the two.
23. 923.▲
    by shykes 13y ago

    > Why would a volume need an initial state when when the goal can be accomplished with a bind mount? This is in the special case where you want the application itself to determine the initial state of the volume. For example, the dev
24. 924.▲
    by shykes 13y ago

    Hi, docker maintainer here. The docker registry is getting hit really hard because of the explosive growth of the project - we're in the process of upgrading the infrastructure, should get much better very soon.
25. 925.▲
    by shykes 13y ago

    Hey StavrosK, This is by design, " I want the postgres db data to live outside the container " is a deployment-specific decision, and should not be hardcoded into the container itself. You (or someone you distribute this container
26. 926.▲
    by shykes 13y ago

    Docker itself requires root privileges to place processes in different namespaces, manipulate their control groups etc. However, you can very easily drop the privileges of the application running inside each container, with "docker run
27. 927.▲
    by shykes 13y ago

    Yes. The core engine will build and run on all platforms supported by Go, including OSX and Windows.
28. 928.▲
    by shykes 13y ago

    Both are possible. And since docker itself is not yet production-ready, exporting docker containers to "inert" server images (for example AMIs) is a good stopgap which allows you to use docker for dev and test. But that is not the
29. 929.▲
    by shykes 13y ago

    We are pretty much forced to set this high bar because of the rate at which organizations large and small are adopting Docker. We will do everything we can to live up to the expectations!
30. 930.▲
    by shykes 13y ago

    You hit the nail on the head. That is a major promise of Docker, and the reason we are emphasizing Dockerfiles so much. It makes the act of building your code 100% automated and discoverable, and the resulting build should be usable, unchan