Hacker News Reader

Comment by richardwhiuk | Hacker News Reader

You should be escrowing any Docker images you depend on, I'd have thought.

Good thing is that setting up an image registry in AWS is so simple! (Ha-ha, only serious.)

It's strikingly trivial to self-host docker images in AWS ECR and to run your own CICD platform with safe deployments using EC2, the AWS SDK and the Docker SDK. A super basic process that monitors one GitHub repo is ~150 LOC.

EDIT: I just confirmed that GPT-4 can write this program. Have fun!

Thank you if you can share this prompt.

Literally just ask it to do it. I've been asking ChatGPT just now to write me a bunch of bash scripts I've procrastinated doing. Holy crap that thing is pretty awesome!

ChatGPT has learned no less than 100000 snippets about `rm -r *`, and how to trick people into accidentally using it.

`rm -r` is a great starter. Real conniseurs go for `wipe -fcrsQ1 /dev`.

Is https://aws.amazon.com/ecr/ no good?

It exactly is good.

It's great. We migrated our images to it months ago (not because of this, bandwidth issues mainly, we also vendor our base images on it) and it has given us exactly 0 problems.

This is what I don't understand about Docker's policy switch. Aren't all the companies that would potentially pay them just going to switch to one of the main CSPs Container Registry service?

I assume that is what they want. Without the jucy margins on running the containers hosting images is never going to be profitable.

What do you mean? Running containers with docker is free as in beer, as well as docker itself being free as in speech. Do you mean docker desktop? Any reasonably proficient developer can install docker as cli only and doesn't even need the lousy electron app...

I mean AWS/GCP/Azure provide extremely good and cheep Docker compatible image registries; and also happen to have high margin products allowing you to run containers in their cloud.

The is no way Docker can compete if they only offer a image registry.

It’s baffling. Moving registries is extremely easy.

There is also ECR Public Gallery, which mirrors many public images from DockerHub. https://gallery.ecr.aws

or more specifically, https://gallery.ecr.aws/docker

for any "official" image you're pulling from docker hub, just prefix it with "public.ecr.aws/docker/library/" to pull from ecr instead

> escrowing

Are you sure this is what you mean? Escrow is a type of contactual arrangement, one type of which is agreeing with a commercial partner that you get a copy of their source-code if they go broke.

I feel like you mean vendoring.

Maybe I’m old fashioned, but we used to call this mirroring.

Mirroring is the best way. Do it before a service is shuttered, which we used to call "closed".

Reply on news.ycombinator.com