Hacker Newsnew | past | comments | ask | show | jobs | submit | hssys's commentslogin

Then you probably haven't tried to schedule and manage thousands of containers in production. The reason people use Kubernetes is the problems it solves are much more significant than the complexity of bootstrapping it.


Where I work, we run thousands of JVM instances on bare VMs without issues. We've been doing it for years.

As we're moving these VM based deployments to k8s, the overhead is going up as well as issues. The old system was super easy to understand. "this program downloads the new build file, it extracts it to this directory, starts it up, checks if it's healthy, spins down the old instance, an then updates the load balancer with the new port"


Doesn't Gin still have big issues where it's not compatible with native net/http middleware?


I'm seeing this all over the web currrently.


You might want at least a shell in the container for debugging?


Distroless has debug images for this purpose: https://github.com/GoogleContainerTools/distroless/blob/mast...


Adding a shell seems antithetical to deploying production code as a static-linked binary, not to mention an expansion of the attack surface of the container.


Without a shell, how does one debug if anything goes wrong?


You can start a container with a shell that shares the PID and network namespaces of the container you want to debug.


Reading logs/traces on your log aggregation service and reproducing in a dev system?


How do you debug in the dev env without a shell?


from the host system, containers don't exist in a vacuum


With remote debugging?


remote debugging is a shell


not necessarily. e.g. java runtimes can expose debugging ports when needed that operate on a custom protocol.

or you can just build gdb into the container and run the process under gdb, then attach to the tty.

or you can debug from the host system where the container's pid namespace is a descendant of the root namespace and the other namespaces can be accessed via /proc or unshare.


What I meant is having a remote debugger is as good as having a remote shell in terms of remote code execution.


Debugging is about when the difference between theory and practice breaks down.


You can use nsenter


I believe it's named this way because filters are used to subtract harmonic content.


Interesting and somewhat paranoid reaction. To me these codes discourage behaviours which aren't conducive to a healthy and productive working environment.


You just did a microaggression by calling them paranoid.


I've got a Monzo account, which I'm a big fan of. However, Monzo have definitely had more outages and planned maintenance than the other online banking service I use, which is provided by a different UK bank. I'd consider that a reason not to make the jump.


This was true before they launched their own payment processing.

They often had outages in late 2017 and earlier due to 3rd party reliability.

I haven't had an outage since the current accounts have been released.

No affiliation; just a user since Beta.


I've been a user since the beta too, and while they do have less outages than when they used a third party payment platform, they certainly still have more outages than my other UK bank.


I assume you don't count planned outages also?


Other banks and stuff have outages. Monzo just bothers to tell you about issues.

Also the longest outage I remember was when the third party card processor's server broke and it took them a few days to rebuilt it (which is pretty unnaceptable in this day and age)


Is that after they left beta? I noticed quite a few outages, but that was while they still had the big beta disclaimer on things. I've not had any trouble since.


Very informative post, thanks!


If that is the case then why is this not widely available in the UK?


Healthcare in the UK moves at a snail's pace. NICE requires a lot of evidence before they will permit new treatments. The bigger issue though are the "Daily Mail politics" of using drugs that can be abused - it's seen as politically toxic with a particular segment of voters. Take cannabis as an example - it was moved back to class B years ago, purely for political reasons. And as other nations are starting to use it therapeutically, we still seem light years away.


This describes exactly how it is for me, and I've never been able to put it in to words until now.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: