gdahlm
  • Member for 4 years, 8 months
  • Last seen more than 3 years ago
  • Seattle, WA, United States
Running the docker daemon without root
Accepted answer
6 votes

Compared to just adding the user to the docker group the second links solution is not any more secure. Note how that page still can launch with the --privileged flag, and that it is running ...

View answer
Baking Immutable Images
3 votes

Image generation and distribution quickly rises to O(n^2) or higher, and as terraform is explicitly focused on instantiation it relies on external provisioners for internal state. It will work at a ...

View answer
Assign DNS name to Docker Swarm containers with public IPv6
3 votes

Assuming that "publicly available" is on the public internet it will be difficult. DNS isn't really that reactive to changes and is challenging to run in a secure fashion on the public internet. It ...

View answer
What is the best way to do REST with puppet?
1 votes

While it may not be the answer you are looking for, puppet's DSL lacks verbs on purpose. Puppet's idempotent philosophy is a huge reason it is so useful for some use cases but for this type of need ...

View answer
How do you monitor Node Micro services running inside of Docker Containers?
Accepted answer
4 votes

This is an area where Kubernetes has the correct model, there should be a load balancer between all systems which should have functional health checks. Once you start to add Nagios, Zabbix or other ...

View answer
Is there evidence to suggest that the Docker/Hashicorp ecosystem requires a higher calibre of software development engineer?
Accepted answer
4 votes

I apologize for the novel length response, but I want the industry to start having these discussions as the potential advantages are huge. The problem is not that it is necessarily more complicated ...

View answer