Hacker News with Generative AI: Containerization

Container CPU requests and limits explained with GOMAXPROCS tuning (victoriametrics.com)
In this article, we’re going to cover a few things that might’ve puzzled you if you’ve been running your applications, especially Go applications, in Kubernetes:

Containerization, Kubernetes, Go, Performance Optimization, System Administration

5 points by valyala 15 days ago | 1 comments

Build a Container Image from Scratch (danishpraka.sh)
For a developer, a Container image is essentially a collection of configurations required to run a container. But what really is a container image? You might know what a container image is, how it is made up of layers and that it’s a collection of tar archives. There are questions that still went unanswered, questions such as what makes up a layer, how are layers combined to form a complete filesystem or multi-platform images, etc.

Containerization, Linux, Software Development, Programming, DevOps

196 points by prakashdanish 39 days ago | 56 comments

Goodbye Dockerfile, Hello Bazel: Doubling Our CI Speed (plaid.com)
In the first half of 2024, Plaid’s Developer Efficiency team set out to speed up our largest CI pipeline without disrupting developer workflows—and ended up cutting CI times by 50%, shrinking container images by 90%, and making local iteration up to 5x faster.

Software Development, CI/CD, Performance Optimization, Containerization, Bazel

20 points by nchepanov 47 days ago | 2 comments

Warewulf is a stateless and diskless container OS provisioning system (github.com/warewulf)
Warewulf is a stateless and diskless container operating system provisioning system for large clusters of bare metal and/or virtual systems.

Operating Systems, Containerization, Bare Metal, Virtualization, Open Source

147 points by mooreds 51 days ago | 50 comments

Stagex – Container-native, full-source bootstrapped, and reproducible toolchain (stagex.tools)
Minimalism and security first repository of reproducible and multi-signed OCI images of common open source software toolchains full-source bootstrapped from Stage 0 all the way up.

Security, Open Source, Containerization, Software Development, Reproducibility

36 points by robinhoodexe 52 days ago | 14 comments

Docker Engine v28: Hardening Container Networking by Default (docker.com)
Docker simplifies containerization by removing runtime complexity and making app development seamless. With Docker Engine v28, we’re taking another step forward in security by ensuring containers aren’t unintentionally accessible from local networks. This update isn’t about fixing a single vulnerability — it’s about security hardening so your containers stay safe.

Security, Docker, Containerization, Networking

6 points by meysamazad 56 days ago | 0 comments

Replace Docker Compose with Quadlet and Systemd (matduggan.com)
So for years I've used Docker Compose as my stepping stone to k8s. If the project is small, or mostly for my own consumption OR if the business requirements don't really support the complexity of k8s, I use Compose.

Docker, Systemd, Kubernetes, Containerization, DevOps

23 points by slyall 63 days ago | 3 comments

Kleene as a Container Management Platform for FreeBSD (gyptazy.com)
Kleene is a container management (jail manager) platform designed specifically for FreeBSD, bringing familiar concepts from Docker while fully embracing FreeBSDs native tools and philosophy.

Containerization, FreeBSD, Operating Systems, Tools

62 points by rodrigo975 70 days ago | 9 comments

Deploying Rails on Docker: Kamal Alternative (impactahead.com)
Recently, Basecamp, the creators of Ruby on Rails, released a solution for deploying it on bare metal servers. Kamal is Capistrano for Containers and is an alternative solution to Capistrano, Kubernetes, and Docker Swarm.

Deployment, Docker, Containerization

32 points by thunderbong 95 days ago | 17 comments

How many Alpine packages can you install at once? (2024) (naff.dev)
It’s annoying to try and run a command only to discover it hasn’t been installed. It’s even more annoying to build an entire container and miss some crucial dependency your app needs. Wouldn’t it be more convenient if your machine already had all of the software you could ever need installed ahead of time?

Software, Linux, Development Tools, Containerization

92 points by todsacerdoti 95 days ago | 36 comments

CPU Throttling for containerized Go applications explained (kanishk.io)
It’s been a long time since I wrote something here. Past few years I’ve been busy at work which is where most of my writing is done these days. This particular entry comes as an offshoot of a production disaster I saw and then took the opportunity to dive deep and learn more. What seemed like a convoluted problem at the outset, ended up being pretty fascinating in the end.

Go Programming, Containerization, Performance Optimization

96 points by imiric 209 days ago | 17 comments

Our container platform is in production. It has GPUs. Here's an early look (cloudflare.com)
We’ve been working on something new — a platform for running containers across Cloudflare’s network. We already use it in production for Workers AI, Workers Builds, Remote Browsing Isolation, and the Browser Rendering API. Today, we want to share an early look at how it’s built, why we built it, and how we use it ourselves.

Cloud Computing, Containerization, GPUs, Networking, Early Access

199 points by jgrahamc 211 days ago | 74 comments

Noisy neighbor detection with eBPF (netflixtechblog.com)
The Compute and Performance Engineering teams at Netflix regularly investigate performance issues in our multi-tenant environment. The first step is determining whether the problem originates from the application or the underlying infrastructure. One issue that often complicates this process is the "noisy neighbor" problem. On Titus, our multi-tenant compute platform, a "noisy neighbor" refers to a container or system service that heavily utilizes the server's resources, causing performance degradation in adjacent containers.

Performance Optimization, Cloud Computing, Networking, Containerization, System Monitoring

256 points by el_duderino 227 days ago | 64 comments

Earthly: Like Docker for Builds (github.com/earthly)
Earthly is a versatile, approachable CI/CD framework that runs every pipeline inside containers, giving you repeatable builds that you write once and run anywhere.

CI/CD, DevOps, Software, Containerization, Build Tools

21 points by gzel 229 days ago | 1 comments

RunCVM: An open-source Docker runtime for launching container images in VMs (github.com/newsnowlabs)

Docker, Virtual Machines, Open Source, Containerization, Software

57 points by newstechfounder 240 days ago | 12 comments

CNCFsweeper (netlify.app)

Open Source, DevOps, Containerization

39 points by theflyestpilot 248 days ago | 7 comments

Podman Desktop 1.12: Remote access, macOS native GPU support and AI Lab (podman-desktop.io)

Containerization, Software, Linux, macOS, Artificial Intelligence

11 points by twelvenmonkeys 250 days ago | 1 comments

Contrast: Confidential container deployments on Kubernetes at scale (github.com/edgelesssys)