Hacker News Reader

Comment by mrweasel | Hacker News Reader

What are you actually trying to do? I ask because I’m looking for a good tool to provision VMs on VMWare ESXi. That’s different though, Nomad won’t help me with that.

In my case we use Ansible and Puppet to orchestrate VMs. Puppet for the stuff all VMs need, and Ansible for deploying custom software. Given that we at the most have 8 VMs that are completely identical, Nomad makes very little sense.

View on HN

In my case it’s a micro services architecture. We use vms over containers for elevated security. The goal is to automate production as much as possible.

Wouldn't something like KubeVirt be more ideal to handle these types of workloads then?

You could run them all on the same host and use docker with kata containers. The firecracker hypervisor was developed by aws to even run multiple tenants on the same host, so it should be very secure.

Why use configuration management over dockerfiles and images?

Orchestration is more than just configuring individual instances, but rather being able to deploy your entire app which may include instances, load balancers, lambdas, data stores and/or other infrastructure.

No I mean why use Ansible and Puppet when you can create clean workloads from a docker image.

They said they’re using VMs over Docker for better security control

Ah gotcha. Thanks. Missed that.

you can still export a container and run it as a vm with a bit of effort: https://blog.davidv.dev/docker-based-images-on-baremetal.htm...

Interesting! I haven't used VMs in a while due to being fully sucked into the world of Docker, but isn't VM configuration at the point you can do something similar to a Dockerfile to run? Or is it easier to go from Dockerfile -> VM?

We use Ansible to configure and deploy containers in many cases. Dockerfiles and container images aren’t really doing the same thing as configuration management.

Reply on news.ycombinator.com