Hacker News new | ask | show | jobs
by bogomipz 3279 days ago
>"I had the same feeling, but this also reinforced my view that Docker and containerization in general (often used as a scapegoat to not have to do proper configuration management) 'for the masses' is more problematic than helpful. In most cases it doesn't solve anything but does add problems that can be hard to debug."

The issue described in this post has nothing to do with "config management vs containers." Its' odd that this article would have "reinforced" that view. How would configuration management have prevented a noisy neighbor?

From the summary:

"The core lesson of this story: just because you are using containers and you get the impression that your applications are perfectly virtualized and isolated, don’t assume the kernel is fully isolating every underlying resource at a container granularity."

and

"Luckily, the solution is there and rather simple: make sure to deeply monitor all your applications."

That's nothing to do with any "configuration management vs containers" argument and everything to do with proper metrics collection and monitoring, which should be part of every "operational readiness" checklist whether Docker is used or not.

Lastly saying that Docker "In most cases it doesn't solve anything" is an absurd statement. Do you believe that virtualization does't solve any problems? If so why do you imagine the Linux kernel supports it?

1 comments

just because you are using containers and you get the impression that your applications are perfectly virtualized and isolated

Anyone who believes in the first place this shouldn't be running production systems...

Your comment contains two sentence fragments, neither of which is coherent.
Seems perfectly straightforward. If you believe containers give you the level of isolation that VMs would, then you have fundamental misunderstandings of the technology which in a sane organisation would preclude you from operating important systems.
No your comment is anything but straightforward. In fact its grammatically incorrect to the point of being incoherent and incomprehensible. Maybe you should re-read what you wrote? It's bizarre to think that anyone would read that and think it was articulate.

Nowhere did I state that or even remotely suggest that containers give you the level of isolation that VMs would. My comment was refuting the OPs suggestion that "configuration management" was relevant to the article. Maybe you should go back and re-read the thread.