8 ms·
I love stuff like this. People will remark about how this is a waste of time, others will say it is absolutely necessary, even more will laud it just for the f
by tadbit 4y ago
I love stuff like this.
People will remark about how this is a waste of time, others will say it is absolutely necessary, even more will laud it just for the fun of doing it. I'm in the middle camp. I wish software/systems engineers would spend more time optomising for size and performance.
- encryptluks2 4y agoThe difference between a systems engineer and a software engineer is that to a systems engineer a half functioning 5MB docker image is okay but to a software engineer a fully functional 5GB Node image is fine.
- ttty 4y agoPremature optimisation? 5 gb doesn’t matter. It’s not great, don’t get me wrong.
- deleted 4y ago[deleted]
- qbasic_forever 4y agoI think the real value is just focusing on the absolute minimum necessary software in a production docker/container image. It's a good practice for security with less surface area for attackers to target.
- memish 4y agoWouldn't removing Docker entirely be a good optimization?
- kube-system 4y agoDocker adds other value to the lifecycle of your deployment. An "optimization" where you're removing value is just a compromise. Otherwise we'd all run our static sites on UEFI.
- jamal-kumar 4y agoyeah see some of us still do this on OSes that haven't turned into a giant bloated hodgepodge of security theatre and false panacea software. docker has dead whale on the beach vibes. what value does it offer to those of us who have moved on from the mess linux is becoming?
- themacguffinman 4y agoOut of curiosity, what OS have you moved on to?
- jamal-kumar 4y agoOpenBSD for the past 10 years or so has been really good to me and my clients, and it just keeps on getting better while linux keeps on getting worse. It's kind of a nobrainer these days. Hell if you just need to serve static HTTP it even has its own built in webserver now: https://man.openbsd.org/httpd https://man.openbsd.org/httpd
- kube-system 4y agoI’m not suggesting it has value to everyone. I’m suggesting it has value to the people who see value in it.
- jamal-kumar 4y agoI'm super curious to know what the value to people who see that happens to be. It's serving static websites, why do I need to wrap THAT of all things in a container? Really, enlighten me
- mise_en_place 4y agoBecause you want a reproducible environment/runtime for that static server. Nix/NixOS takes it a step further, in that it provides not only a reproducible runtime environment, but a reproducible dev and build environment as well.
- throwanem 4y agoIn terms of CPU cycles and disk space, maybe. In terms of engineer cycles, absolutely not. Which costs more?
- danuker 4y agoHmm, a SCP shell script on my laptop, prompting my SSH key's password and deploying the site to the target machine? Or a constantly-updating behemoth, running as root, installing packages from yet another unauditable repository chain?
- hyperhopper 4y agoThe first option is something custom that you had to write yourself and remember how to use years later, or explain how to use to others The second option is standardized and usually the same 1 or 2 commands to run anywhere
- somenewaccount1 4y agoYou forgot the step where you had to provision that server to run the software and maintain all the systems security updates on the live running server, and that server requires all the same maintenance, with or without docker. And if you fuck it up, better call the wife and cancell Sunday plans because you forgot how it all gets installed and ......yeah, just use docker :p
- danuker 4y agoDebian offers unattended upgrades: https://wiki.debian.org/UnattendedUpgrades https://wiki.debian.org/UnattendedUpgrades And security updates, as you said, are needed regardless of whether you run Docker on top. I think Docker is a needless complexity and security risk.
- throwanem 4y agoAnd you're welcome to think so, but if you intend to make a case for removing Docker as optimization, you still have yet to start.