HackerTrans
TopNewTrendsCommentsPastAskShowJobs

sclevine

no profile record

Submissions

More useful checksums using Merkle trees

github.com
2 points·by sclevine·قبل 4 سنوات·0 comments

Cloud Native Buildpacks Enter Incubation in CNCF

cncf.io
11 points·by sclevine·قبل 6 سنوات·0 comments

Show HN: CLI to convert between data serialization formats, preserves order

github.com
1 points·by sclevine·قبل 6 سنوات·0 comments

comments

sclevine
·قبل 5 سنوات·discuss
This is especially true of Paketo's buildpacks, which tend to do exactly one thing each. E.g., Paketo Node.js buildpack is just a configuration file that's composed of other buildpacks: https://github.com/paketo-buildpacks/nodejs/blob/main/buildp...
sclevine
·قبل 5 سنوات·discuss
Additionally, Paketo's buildpacks build reproducible images given the same source code and buildpack versions.
sclevine
·قبل 6 سنوات·discuss
Don't hesitate to reach out on Slack if you have more questions: https://slack.buildpacks.io

A few tips on rebase:

(1) If you want to rebase without pulling the images first (so there's no appreciable data transfer in either direction), you currently have to pass `--publish`.

(2) If you need to rebase against your own copy of the runtime base image (e.g., because you relocated the upstream copy to your own registry), you can pass `--run-image <ref>`.
sclevine
·قبل 6 سنوات·discuss
Many comments here point out how difficult it is to manage a separate dependency stack for each container when you use Dockerfiles to build them. This problem is just as difficult, time-intensive, and security-critical for microservice apps running on K8s as it is for CLI tools and graphical apps.

Worth pointing out that there is an incubating CNCF project that tries to solve this problem by forgoing Dockerfiles entirely: Cloud Native Buildpacks (https://buildpacks.io)

CNB defines safe seams between OCI image layers so that can be replaced out of order, directly on any Docker registry (only JSON requests), and en-mass. This means you can, e.g., instantly update all of your OS packages for your 1000+ containers without running any builds, as long as you use an LTS distribution with strong ABI promises (e.g., Ubuntu 20.04). Most major cloud vendors have quietly adopted it, especially for function builds: https://github.com/buildpacks/community/blob/main/ADOPTERS.m...

You might recognize "buildpacks" from Heroku, and in fact the project was started several years ago in the CNCF by the folks who maintained the Heroku and Cloud Foundry buildpacks in the pre-Dockerfile era.

[Disclaimer: I'm one of the founders of the project, on the VMware (formerly Cloud Foundry) side.]