Hacker News Reader

I imagine I've completely misunderstood it, but to me that sounds like pulling Docker images and running them on something like a Kubernetes cluster. The Docker images have to meet a contract, with a type of UI, authentication endpoints, etc.

Does that make sense as a comparison?

View on HN

Yes and no.

https://sandstorm.io/news/2014-08-19-why-not-run-docker-apps

Roughly yes. All wrapped in a nice UI.

A key difference is that an app can run in Docker unmodified, but can require significant changes to run in Sandstorm.

I think the biggest cause of this is just how Sandstorm really wants you to use it for authorization, which means that authorization needs to be scoped at the app instance level. There are good reasons for this. However, for standalone use, app instances need broader scope than what you usually want for authorization.

If not for that mismatch, one could just wrap most existing apps that support pubcookie authentication in a layer that translates Sandstorm APIs into HTTP.

Reply on news.ycombinator.com