5 ms·

Show HN: Gandalf – $1 private Docker registries

37 points by lexaude 12y ago

We just released Gandalf.io, a private docker registry-as-a-service. We've kept it really simple and affordable. The first private docker is free and the rest come in plans all priced at $1 / docker. We built Gandalf.io as an internal tool to manage and access our dockers and liked it so much we're releasing it as a service. Gandalf.io is built by a small team of developers for fellow developers. We're eager to do more like managing trusted builds, continuous integration and continuous deployment, as a single pipeline using only dockers on our platform. For now though we think empowering teams to get started with dockers by sharing them easily and using the standard docker cli will do.

nubela 12y ago
tempting at a gr8 price. all it has to do now is to work correctly.
- lexaude 12y ago
  Heh. yeah. its worked for us so far internally. we're scratching our own itch. and it certainly could use a lot of polish. but we think our core focus on docker collab could help us fine tune it and provide a fantastic service with all the support devs need.
rubiquity 12y ago
I'm a Docker newbie but, don't private registries go against the spirit of Docker and basically every infrastructure automation tool created in last 5 years? I can't even see enterprisey companies finding this useful because their IT policies are so strict that having config on someone else's servers, private or not, is against their wonky rules.
- lexaude 12y ago
  Not really - much like private repos on github don't go against the spirit of github's public repos. The kind folks at Docker, Inc. the company behind this fantastic technology, themselves recently announced a commercial private registry service too. They kinda beat us to it ;)
- thu 12y ago
  This is just a part of XaaS infrastructure and XaaS is widely used. Git hosting (e.g. GitHub), file hosting (e.g. S3), VM or container "hosting" (e.g. Heroku), mails... Why can't Docker images couldn't be hosted in the cloud ?
  - rubiquity 12y ago
    It's not using the "cloud" that I was curious about. I thought Docker images were supposed to be shared. OP's comment fairly addresses that.
    - lexaude 12y ago
      I'd also add that closed and open source often feed into each other in a kind of symbiotic relationship. Sounds controversial to the libertarians and hard-core open source folks but that's the way it usually plays out.
    - johnbellone 12y ago
      There are still a whole bunch of companies who aren't on the bandwagon of putting their code up on the Internet. In fact, there are a whole bunch of companies who likely cannot due this due to various regulations and contracts with their clients.
- aegiso 12y ago
  First, in the real world private registries are used for builds containing source, sensitive keys, and so forth. There is a use case here. But second, no enterprisey company will use a service that bills like this, because -$4 and $250 per month all rounds down to zero, so it's not a selling point -$4 signals no support when the shit inevitably hits the fan -$4 signals this company will tank along with your data in a month An enterprise company with actual money will take an hour or two of dev time to boot up one of the open source registries (https://github.com/dotcloud/docker-registry https://github.com/dotcloud/docker-registry) and stay in control. Source: working at a Docker startup for almost a year
  - deleted 12y ago
    [deleted]
    - aegiso 12y ago
      I assure you I'm serious. You might be interested in reading patio11's essays on this. He says if far better that I can.
      - lexaude 12y ago
        I assure you we've debated this a lot before putting out that pricing. There is a way to do this and do this well. For us pricing docker hosting competitively is the best way to do it, especially for a startup ecosystem that is only just beginning to wake up to the potential of docker-based testing and deployment.
    - opendais 12y ago
      He is quite serious. If you are interested in the corporate market, you probably will want to offer a special 'Enterprise' pricing plan that includes 'Enterprise-y' features at a higher price point [e.g. $249 / 250 repository minimum]
      - lexaude 12y ago
        We will. But we won't be offering an enterprise plan while we're in beta :) Sure we're sending a signal that we're not ready for enterprise folks. I can be candid in saying that we'd rather be the digital ocean of dockers than an AWS. at this point :p
arb99 12y ago
Good luck using something called 'Gandalf'..
- lexaude 12y ago
  hmmm. I was a lawyer in a previous avatar. I think we're ok.
  - aegiso 12y ago
    Famous last words when going up against Goliath Hollywood.
    - lexaude 12y ago
      :D thank you.
sabhiram 12y ago
So what are sizing limits on each "repo" you offer? Unlimited? I could not find a FAQ-esq section on your page, and was too lazy to "sign up to (possibly) find out".
- lexaude 12y ago
  We're currently offering the service without constraints - its still a beta offering and we could add limits later on. We're assuming you'll build a docker within reasonable limits - say 3-4GB max. FAQ page coming up soon.
toisanji 12y ago
what exactly is the use case for this?
- lexaude 12y ago
  Sharing private containers among team members, especially when remote working. That's the best use case. Storing your own private containers for access from multiple locations or machines. Auto-deploying containers using the standard docker api
opendais 12y ago
I'm uncertain as to why I'd use this over the official project offering [ https://index.docker.io/plans/ https://index.docker.io/plans/ ] at roughly the same price point? [e.g. $50/month = 50]?
- lexaude 12y ago
  for one you can get started with a private repo without paying for it. You can securely share it with your entire team and not pay one cent, and you can do that just by creating an account on gandalf.io. Secondly, for those who're starting out using dockers, a four docker plan is optimal because most folks use a combination of containers inheriting from public and private repos. So you can pay $4 per month for 4 repos using gandalf.io whereas you have to pay a minimum of $7 per month for docker.io's service. Thirdly, this is just the beginning and we're working on a roadmap of features, some of which docker.io might not provide. Fourth - support is important when using a service, and support can have a specific flavour when using a startup offering. try gandalf.io to understand the flavor :) !
  - opendais 12y ago
    Well, make some announcements when you start implementing #3. :) For now, I'll stick with my git-deploy-over-ssh scheme.
    - lexaude 12y ago
      disappointed. not even a single free docker?
      - opendais 12y ago
        Using a single free docker for a personal project would require me to rewrite how I deploy stuff for my personal projects. It is much easier/saner for me to stick with git pull && docker build. If my SSH install isn't secure, I'm screwed anyway. If I was seriously considering switching all of my containers to Service X, rewriting it would be trivial and just a cost of doing business.
lexaude 12y ago
btw, for support questions - we're #gandalfio on freenode
deleted 12y ago
[deleted]
jander 12y ago
Maybe I grok access privs incorrectly but.. Personal user data Full access This application will be able to read and write all user data. This includes the following: Private email addresses Profile information Followers Why read AND write? Why all data?
- lexaude 12y ago
  Our goal is to integrate your docker workflow very tightly with github. The user will be able to decide which features to switch on and off and whether to write or only read! Obviously we'd rather announce these features when they're ready and we'd rather collect the data upfront so we don't have to prompt the user once again when they sign in.
  - cmelbye 12y ago
    That seems like an OAuth anti pattern. Why would you ask the user for every permission when they're signing up? That can only hurt conversions. Ask for the bare minimum, and then request more permissions if the user does something within the app that needs them. Especially for something as sensitive as this, you want people to feel safe using the product and you can't do that by scaring them when they hit "Sign Up with GitHub."
    - lexaude 12y ago
      I do agree that's something we might have to change if the signups slow down. And we need to do a cost-benefit on that perhaps. At the moment, folks are signing up though :)
      - jander 12y ago
        Which perhaps shows how little "folks" care about who they share their data with. Additionally I have private organisation repos that I really don't want you taking a peek at. Sorry, no dice for me unless this is tightened up.
        12y ago
wcchandler 12y ago
Constructive criticism =/= trolling. Please don't equate the two when posting on HN. People here are offering comments, insight, and opinions. It shouldn't be surprising if they are not in agreement with you on certain aspects. That being said, best of luck!
- lexaude 12y ago
  Thank you! yes, sometimes we misunderstand the intent of a comment. and sometimes we don't :)
nickstinemates 12y ago
Best of luck guys, I love competition :)
- lexaude 12y ago
  We love you guys. in fact, we didn't realize you guys were the competition till we were in alpha :)
fancyremarker 12y ago
There are already private Docker registries out there. My company uses https://quay.io https://quay.io , for example, and Docker has its own private registry. How does Gandalf compare to these existing offerings, besides on price? Security for Docker images is just as important, and in some cases more important than it is for code assets. What protection does Gandalf offer against unauthorized downloading of images/layers, and tampering with images stored in the repository? Does Gandalf plan to support features like building images from a Dockerfile, ideally sent via GitHub repo hook? This is a great workflow convenience offered by both Quay and Docker.
- lexaude 12y ago
  Quay.io is a great product and if you're happy with it we don't recommend moving to Gandalf.io. Gandalf.io went live yesterday and still very much in early beta and we're still improving the functionality and experience. The reason we decided to set up Gandalf was because we think this is a huge potential market with space for at least 3-4 players. We also think docker containerisation is more than just enterprise devops preserve and want to lower the threshold for startups and individual developers to get started. Gandalf.io has an auth layer wrapped around the standard docker registry and you can access it via SSL using the docker api (this includes the docker CLI). We're still examining ways in which we can strengthen the security of the system and are open to suggestions and insights. Github based builds are in the upcoming release slated for next week. Sign up for the free plan and you'll be notified by email when that happens.

37 points by lexaude 12y ago

nubela 12y ago

tempting at a gr8 price. all it has to do now is to work correctly.

lexaude 12y ago
Heh. yeah. its worked for us so far internally. we're scratching our own itch. and it certainly could use a lot of polish. but we think our core focus on docker collab could help us fine tune it and provide a fantastic service with all the support devs need.

rubiquity 12y ago

I'm a Docker newbie but, don't private registries go against the spirit of Docker and basically every infrastructure automation tool created in last 5 years? I can't even see enterprisey companies finding this useful because their IT policies are so strict that having config on someone else's servers, private or not, is against their wonky rules.

lexaude 12y ago
Not really - much like private repos on github don't go against the spirit of github's public repos. The kind folks at Docker, Inc. the company behind this fantastic technology, themselves recently announced a commercial private registry service too. They kinda beat us to it ;)
thu 12y ago
This is just a part of XaaS infrastructure and XaaS is widely used. Git hosting (e.g. GitHub), file hosting (e.g. S3), VM or container "hosting" (e.g. Heroku), mails... Why can't Docker images couldn't be hosted in the cloud ?
- rubiquity 12y ago
  It's not using the "cloud" that I was curious about. I thought Docker images were supposed to be shared. OP's comment fairly addresses that.
  - lexaude 12y ago
    I'd also add that closed and open source often feed into each other in a kind of symbiotic relationship. Sounds controversial to the libertarians and hard-core open source folks but that's the way it usually plays out.
  - johnbellone 12y ago
    There are still a whole bunch of companies who aren't on the bandwagon of putting their code up on the Internet. In fact, there are a whole bunch of companies who likely cannot due this due to various regulations and contracts with their clients.
aegiso 12y ago
First, in the real world private registries are used for builds containing source, sensitive keys, and so forth. There is a use case here. But second, no enterprisey company will use a service that bills like this, because -$4 and $250 per month all rounds down to zero, so it's not a selling point -$4 signals no support when the shit inevitably hits the fan -$4 signals this company will tank along with your data in a month An enterprise company with actual money will take an hour or two of dev time to boot up one of the open source registries (https://github.com/dotcloud/docker-registry https://github.com/dotcloud/docker-registry) and stay in control. Source: working at a Docker startup for almost a year
- deleted 12y ago
  [deleted]
  - aegiso 12y ago
    I assure you I'm serious. You might be interested in reading patio11's essays on this. He says if far better that I can.
    - lexaude 12y ago
      I assure you we've debated this a lot before putting out that pricing. There is a way to do this and do this well. For us pricing docker hosting competitively is the best way to do it, especially for a startup ecosystem that is only just beginning to wake up to the potential of docker-based testing and deployment.
  - opendais 12y ago
    He is quite serious. If you are interested in the corporate market, you probably will want to offer a special 'Enterprise' pricing plan that includes 'Enterprise-y' features at a higher price point [e.g. $249 / 250 repository minimum]
    - lexaude 12y ago
      We will. But we won't be offering an enterprise plan while we're in beta :) Sure we're sending a signal that we're not ready for enterprise folks. I can be candid in saying that we'd rather be the digital ocean of dockers than an AWS. at this point :p

arb99 12y ago

Good luck using something called 'Gandalf'..

lexaude 12y ago
hmmm. I was a lawyer in a previous avatar. I think we're ok.
- aegiso 12y ago
  Famous last words when going up against Goliath Hollywood.
  - lexaude 12y ago
    :D thank you.

sabhiram 12y ago

So what are sizing limits on each "repo" you offer? Unlimited? I could not find a FAQ-esq section on your page, and was too lazy to "sign up to (possibly) find out".

lexaude 12y ago
We're currently offering the service without constraints - its still a beta offering and we could add limits later on. We're assuming you'll build a docker within reasonable limits - say 3-4GB max. FAQ page coming up soon.

toisanji 12y ago

what exactly is the use case for this?

lexaude 12y ago
Sharing private containers among team members, especially when remote working. That's the best use case. Storing your own private containers for access from multiple locations or machines. Auto-deploying containers using the standard docker api

opendais 12y ago

I'm uncertain as to why I'd use this over the official project offering [ https://index.docker.io/plans/ https://index.docker.io/plans/ ] at roughly the same price point? [e.g. $50/month = 50]?

lexaude 12y ago
for one you can get started with a private repo without paying for it. You can securely share it with your entire team and not pay one cent, and you can do that just by creating an account on gandalf.io. Secondly, for those who're starting out using dockers, a four docker plan is optimal because most folks use a combination of containers inheriting from public and private repos. So you can pay $4 per month for 4 repos using gandalf.io whereas you have to pay a minimum of $7 per month for docker.io's service. Thirdly, this is just the beginning and we're working on a roadmap of features, some of which docker.io might not provide. Fourth - support is important when using a service, and support can have a specific flavour when using a startup offering. try gandalf.io to understand the flavor :) !
- opendais 12y ago
  Well, make some announcements when you start implementing #3. :) For now, I'll stick with my git-deploy-over-ssh scheme.
  - lexaude 12y ago
    disappointed. not even a single free docker?
    - opendais 12y ago
      Using a single free docker for a personal project would require me to rewrite how I deploy stuff for my personal projects. It is much easier/saner for me to stick with git pull && docker build. If my SSH install isn't secure, I'm screwed anyway. If I was seriously considering switching all of my containers to Service X, rewriting it would be trivial and just a cost of doing business.

lexaude 12y ago

btw, for support questions - we're #gandalfio on freenode

deleted 12y ago

[deleted]

jander 12y ago

Maybe I grok access privs incorrectly but.. Personal user data Full access This application will be able to read and write all user data. This includes the following: Private email addresses Profile information Followers Why read AND write? Why all data?

lexaude 12y ago
Our goal is to integrate your docker workflow very tightly with github. The user will be able to decide which features to switch on and off and whether to write or only read! Obviously we'd rather announce these features when they're ready and we'd rather collect the data upfront so we don't have to prompt the user once again when they sign in.
- cmelbye 12y ago
  That seems like an OAuth anti pattern. Why would you ask the user for every permission when they're signing up? That can only hurt conversions. Ask for the bare minimum, and then request more permissions if the user does something within the app that needs them. Especially for something as sensitive as this, you want people to feel safe using the product and you can't do that by scaring them when they hit "Sign Up with GitHub."
  - lexaude 12y ago
    I do agree that's something we might have to change if the signups slow down. And we need to do a cost-benefit on that perhaps. At the moment, folks are signing up though :)
    - jander 12y ago
      Which perhaps shows how little "folks" care about who they share their data with. Additionally I have private organisation repos that I really don't want you taking a peek at. Sorry, no dice for me unless this is tightened up.
      - 12y ago

wcchandler 12y ago

Constructive criticism =/= trolling. Please don't equate the two when posting on HN. People here are offering comments, insight, and opinions. It shouldn't be surprising if they are not in agreement with you on certain aspects. That being said, best of luck!

lexaude 12y ago
Thank you! yes, sometimes we misunderstand the intent of a comment. and sometimes we don't :)

nickstinemates 12y ago

Best of luck guys, I love competition :)

lexaude 12y ago
We love you guys. in fact, we didn't realize you guys were the competition till we were in alpha :)

fancyremarker 12y ago

There are already private Docker registries out there. My company uses https://quay.io https://quay.io , for example, and Docker has its own private registry. How does Gandalf compare to these existing offerings, besides on price? Security for Docker images is just as important, and in some cases more important than it is for code assets. What protection does Gandalf offer against unauthorized downloading of images/layers, and tampering with images stored in the repository? Does Gandalf plan to support features like building images from a Dockerfile, ideally sent via GitHub repo hook? This is a great workflow convenience offered by both Quay and Docker.

lexaude 12y ago
Quay.io is a great product and if you're happy with it we don't recommend moving to Gandalf.io. Gandalf.io went live yesterday and still very much in early beta and we're still improving the functionality and experience. The reason we decided to set up Gandalf was because we think this is a huge potential market with space for at least 3-4 players. We also think docker containerisation is more than just enterprise devops preserve and want to lower the threshold for startups and individual developers to get started. Gandalf.io has an auth layer wrapped around the standard docker registry and you can access it via SSL using the docker api (this includes the docker CLI). We're still examining ways in which we can strengthen the security of the system and are open to suggestions and insights. Github based builds are in the upcoming release slated for next week. Sign up for the free plan and you'll be notified by email when that happens.