Hacker News Reader

Hacker News

Comment by isatty | Hacker News Reader

Parent Full thread

isatty

> The interesting part: our air-gapped deployment actually runs faster than our SaaS version.

This is the least surprising thing I’ve read all day.

View on HN

If they also realize that having less dependencies makes deployment easier we have gone full circle.

I can't believe how many devs think dependancies are completely cost free...

Dependencies and code are both liabilities with maintenance costs. Devs chronically underestimate the cost of both, myself included.

I don’t get it, the dependencies are either needed or not. If needed that are either pulled from a project or written. So how are dependencies evil , is the rage against feature bloat pulling in dependencies ? Then the issue is the bloat

Functionality is either needed or it isn't, but it doesn't need to come from an external dependency. When it does, it probably comes with functionality you didn't need too. And as soon as you have a compile/runtime dependency on external code, your compile/execution environment needs to always have access to third party code. So that's bloat and complexity. You also give up control. Hopefully it ends up saving a bunch of time over developing it internally.

Hopefully an upgrade to an external library doesn't end up including another dependancy that happens to include some backdoor that steals all the credit card information in your database. Or a crypto miner in frontend code. Or introduces a bug that stops people from being able to checkout. Or the money package starts calculating slightly differently than your payments provider... Etc. etc.

Or even just plain remove the API you were using in yet another redesign.

Which version of react-router are we on by now? Surely it must be done by now :-/

> I don’t get it, the dependencies are either needed or not.

Some developers' judgement about needed dependencies can be suspect though: https://news.ycombinator.com/item?id=29241943

This topic is beaten to death in Philosophy of Software Design - I really, really do recommend it.

instead of CI/CD pipelines and a million dependances, why don't we just put all of the containers, like, on one single VM? and just make it a linux box or whatever?

(presumably read in Adam Something's voice)

The usual way to deploy such things is actually to create 1 VM for that application, install podman, and then run all those tons of containers in that VM. Because you cannot trust software vendors to not do or require stupid shit like requiring the docker socket, mounting overly broad volumes from the hosts filesystem, provide working and non-stupid compose/helm/...-files and things like that. Often the support contract also requires a specific version of a specific OS, a specific kubernetes distro or something like puppet/chef/... for deployment. Since for the multitude of software vendors and requirements, we couldn't easily fulfill all those at the same time on the same kubernetes cluster or infra, we just split it up into VMs.

Indeed. For multiple reasons:

- it is not at all surprising that when you remove cruft, code performs batter

- it is not at all surprising that this is not common enough amongst software engineers to even consider these things (competing business interests probably cause this often)

Not being connected to the work VPN already slows down my Windows to a near halt since a few unreachable network drives is all it takes to make Explorer go unresponsive.

Seems like engineers forget to test these things nowadays.

If by ”nowadays” you mean the past 30 years. Slow network drives making Explorer go completely unresponsive has been a thing since Windows 95.

I’m more surprised to hear that bug still hasn’t been fixed. Luckily I don’t use Windows myself since many years ago.

HN negativity strikes again.

Can't we just read this as "there are 2 wins here: security and performance"?

Which is not surprising, but still a GoodThing(TM) right?

Totally agree. Why pick the one negative thing to say instead of saying “this should be done more often” for example. Just aggravating, as a behaviour.

All year maybe?

Once again going full-circle with the industry reinventing self-hosted software. Excuse my cynicism, I'm going back to minding my own business (reinventing design systems / component libraries, lol)

Yeah lol no shit.

Reply on news.ycombinator.com