HackerTrans
TopNewTrendsCommentsPastAskShowJobs

tontony

no profile record

Submissions

Library of Juggling

libraryofjuggling.com
140 points·by tontony·5 месяцев назад·28 comments

comments

tontony
·2 месяца назад·discuss
That's fair; good solution.
tontony
·2 месяца назад·discuss
Compose is great, but a couple things always created friction for me when using it for non-local setups:

* Lack of a user-friendly way of managing a Docker Compose installation on a remote host. SSH-forwarding the docker socket is an option, but needs wrappers and discipline.

* Growing beyond one host (and not switching to something like Kubernetes) would normally mean migrating to Swarm, which is its own can of worms.

* Boilerplate needed to expose your services with TLS

Uncloud [1] fixed all those issues for me and is (mostly) Compose-compatible.

[1] https://github.com/psviderski/uncloud/
tontony
·7 месяцев назад·discuss
Thanks for the detailed overview!
tontony
·7 месяцев назад·discuss
Secrets -- yes, it's being tracked here: https://github.com/psviderski/uncloud/issues/75 Compose configs are already supported and can be used to inject secrets as well, but there'll be no encryption at rest there in that case, so might not be ideal for everyone.

Regarding questions 2 and 3, the short answers are "not at the moment" and "yes, for now", here's a relevant discussion that touches on both points: https://github.com/psviderski/uncloud/discussions/94

Speaking of Swarm and your experience with it: in your opinion, is there anything that Swarm lacks or makes difficult, that tools like Uncloud could conceptually "fix"?
tontony
·7 месяцев назад·discuss
Sure, but it all boils down to trust at the end of the day. Why would you trust a third-party Debian repository (that e.g. has a different user namespace and no identity linking to GitHub) more than running something from evidently the same user from GitHub, in this specific case?

I'm not arguing that a repository is nice because versioning, signing, version yanking, etc, and I do agree that the process should be more transparent and verifiable for people who care about it.
tontony
·7 месяцев назад·discuss
> What if you want to manage multiple/distinct clusters

Uncloud supports having multiple contexts (think - clusters) in the same configuration file, or you can also use separate config files (via --uncloud-config attribute).

https://uncloud.run/docs/cli-reference/uc_ctx
tontony
·7 месяцев назад·discuss
Curious, what would be an ideal (secure) approach for you to install this (or similar) tool?
tontony
·7 месяцев назад·discuss
Nomad still has a tangible learning curve, which (in my very biased opinion) is almost non-existent with Uncloud assuming the user has already heard about Docker and Compose.
tontony
·7 месяцев назад·discuss
Uncloud is not a Kubernetes distribution and doesn't use K8s primitives (although there are of course some similarities). It's closer to Compose/Swarm in how you declare and manage your services. Which has pros and cons depending on what you need and what your (or your team's) experience with Kubernetes is.