Egregoros

Signal feed

API Docs
Timeline

Post

Remote status

Context

4
menherahair :redeyeorb:

menherahair :redeyeorb:

@menherahair@eientei.org remote
Open link
[CW]

Content warning

re: Self-hosting is dead, long live self-hosting

Show
@phnt this is all because distros stop shipping rootfs. I will not elaborate
as an aside I think docker may be eating at the collective ("collective") ability to actually use container capabilities of systems which is very sad. freebsd is obviously very proud of jails and there's lots of resources on them but bsd sucks ass. linux namespaces are similarly awesome but it's like space magic to most people. lxc can easily do nested containers for you, that'd do wonders for some setups but how many project test for this, let alone tell you to do it?
"hi can I sandbox this" ye use docker, solved clossed not an issue eot
Yukkuri

Yukkuri

@iamtakingiteasy@eientei.org remote
Open link
[CW]

Content warning

re: Self-hosting is dead, long live self-hosting

Show
@menherahair @phnt Since docker is just an abstraction on top of containerd, and containerd is backed by namespaces/cgroups on linux, it should not be a problem to isolate with any other cgroups/namespaces interface, e.g lxc, libvirt or systemd-nspawn, so long you have a filesystem tree with all necessary library versions, which you can just unpack from merged docker image layers.
Replying to @shibao@shitposter.world
Yukkuri

Yukkuri

@iamtakingiteasy@eientei.org remote
Open link
[CW]

Content warning

re: Self-hosting is dead, long live self-hosting

Show
@shibao @menherahair @phnt It's unfortunate, but doesn't seem to be important. With docker images we're getting a standardized distribution format of filesystem and environment variables either way, and that some are funneled in a particular way of running it doesn't detract from your ability to use it with whatever tools or even runtimes you please. Probably better option would be further popularization of fully-statically linked binaries (including any used portions of libc) as a form of distribution (also lends to docker images not many bytes larger than the binary itself), but unless everything is rewritten to go/rust/static-only C builds it is not going to be any time soon, and there is essential deprecation of nsswitch/ld/other traditional for glibc extension and configuration points as well.

Replies

1
Replying to @iamtakingiteasy@eientei.org