Readit News logoReadit News
bmitch3020 commented on Vouch   github.com/mitchellh/vouc... · Posted by u/chwtutha
bmitch3020 · 11 hours ago
I could see this becoming useful to denounce contributors. "This user is malicious, a troll, contributes LLM slop, etc." It could become a distributed block list, discourage some bad behavior I've been seeing on GitHub, assuming the denounce entries are reviewed rather than automatically accepted.

But using this to vouch for others as a way to indicate trust is going to be dangerous. Accounts can be compromised, people make mistakes, and different people have different levels of trust.

I'd like to see more attention placed in verifying released content. That verification should be a combination of code scans for vulnerabilities, detection of a change in capabilities, are reproducible builds of the generated artifacts. That would not only detect bad contributions, but also bad maintainers.

bmitch3020 commented on Steve Bannon Proposes Using ICE in Elections   newsweek.com/steve-bannon... · Posted by u/SilverElfin
secretballot · 4 days ago
This is a predictable play. This had a highish likelihood of happening the moment they announced the massive, rapid funding and personnel expansion. Now that "abolish ICE" (ICE being their critically-important newly-empowered end-run around Posse Comitatus) is trending, they basically have to play every card they've got, or risk seeing their project set back by at least a few years, just as it's gaining steam. It'll take longer to capture enough of the courts and military that they don't need ICE and its bullshit "but immigration enforcement must have special otherwise-unconstitutional powers" smoke-screen of a justification any more.

I also expect:

1) Lawsuits, subpoenas, and indictments against and of elections offices and key officials in Democratic areas of vulnerable Republican districts, timed to mess with their ability to even function. If it suppresses the vote that's a "nice to have" but mostly this is to sow uncertainty about the elections both by generating ginned-up headlines (it doesn't matter if the investigations actually find anything or go anywhere) and by delaying vote counting and causing chaos (e.g. very long lines) on Election Day, which opens up greater space for the GOP to act after the elections.

2) Challenges of the outcomes by the administration and their proxies, and outright calls for Republicans to pull certification tricks akin to the fake-elector crime they attempted in '20. This would be supported by #1, and by ICE-created chaos and vote suppression.

Incidentally, the ICE intervention can take many forms, the most extreme of which (and most effective to the admin) is triggering violence (a lot of people are going to react poorly to being asked "papers, please" by a small squad of armed & armored federal thugs on the way to vote) that actually shuts down polling places in key locations. This both heavily suppresses the vote in areas they've targeted, and serves their "chaos! Democrats are trying to cheat by letting illegals vote! See how much they freak out when we don't let them?" narrative. The lighter version is some cautious shows-of-force and unrealized threats ahead of time, aimed at gentler levels of vote suppression (if you're a citizen but have an accent and aren't white, you might think twice about your odds of getting to the polls without getting locked up for a day or two and losing perhaps five figures you may not have attaining your release, and just stay home, even if ICE ends up not showing or just doing some show-of-force drive-bys that end up all over social media)

I'd love to know what, if anything, state governments are planning to prevent any of this. I've personally not been able to think of a single effective thing they can do about it as far as actually keeping it from happening or recovering quickly from the material harm it does (winning much later in the court of public opinion, for whatever that's worth, is another matter, as is eventually winning in court) but maybe there's something.

(I rate all the above fairly likely, in some form; my outside-but-not-impossible-odds guess is they'll seize some ballot drop boxes or enroute mail-in ballots with nebulous claims of wrongdoing that don't go anywhere but do fuck up specific districts' voting processes, with, as usual, no relief from the courts because by the time anything can be done about it it's a fait accompli and nobody's gonna trust those ballots after the feds have had them, anyway)

bmitch3020 · 4 days ago
One thing states can do is expand early voting. The longer people have to vote, at more locations, the harder it is to focus this chaos on specific precincts on a single day.

The second thing they can do is ensure the police force is on their side. Remove officers that would collaborate with attempts to overthrow an election. Require training, monitor social media, ensure qualified immunity cannot protect them, and make sure they are aware.

bmitch3020 commented on How I estimate work   seangoedecke.com/how-i-es... · Posted by u/mattjhall
impute · 15 days ago
The only reliable way to estimate is to find another relatively similar project and compare it to that. You can say stuff like this new project is roughly similar in scope to Project X but maybe it's about 20% more complicated due to more scope so it will probably take about 20% longer than what Project X took.

The key is to keep data on how long past projects actually took (which not a lot of organizations do). But once you have that real data, you can understand all the unknown unknowns that came up and assume that similar things will come up on the new project.

bmitch3020 · 15 days ago
Except if you've already done a very similar project before, the unknowns are now knowns. And more importantly, problems already have developed solutions that can be copied or reused, and not developed. So a very similar project should be an overestimate, and a repeated task should take a fraction of the first time.
bmitch3020 commented on What has Docker become?   tuananh.net/2026/01/20/wh... · Posted by u/tuananh
bmitch3020 · 16 days ago
Another year, another story written about the demise of Docker. This has been happening since before Kubernetes took off. My own take:

Docker had a choice of markets to go after, the enterprise market was being dominated by the hyperscalers pushing their own Kubernetes offerings. So they pivoted to focus on the developer tooling market. This is a hard market to make work, particularly since developers are very famous for not paying for tooling, but they appear to making a profit.

With Docker Hub, it's always been a challenge to limit how much that costs to run. And with more stuff being thrown in larger images, I don't want to see that monthly bill. The limits they added hurt, but also made a lot of people realize they should have been running their own mirror on-prem, if not only to better handle an upstream outage when us-east-1 has a bad day.

Everything else has been pushing into each of the various popular development markets, from AI, to offloading builds to the cloud, to Hardened Images. They release things for free when they need to keep up with the competition, and charge when enterprises will pay for it.

They've shifted their focus a lot over the years. My fear would be if they stayed stagnant, trying to extract rents without pushing into new offerings. So I'm not worried they'll fail this year, just like I wasn't worried any of the previous years when similar posts were made.

bmitch3020 commented on What has Docker become?   tuananh.net/2026/01/20/wh... · Posted by u/tuananh
zoobab · 16 days ago
Who wants to pay for chroot?
bmitch3020 · 16 days ago
You're missing image distribution, namespaces (networking, pids, mount, users), seccomp (to limit root powers), cgroups (to limit cpu and memory usage), and so much more. There's also Docker Hub with the official images they maintain. And the Desktop tooling makes an embedded Linux VM much easier to work with than spinning up your own VM, copying files around, and forwarding networking ports.
bmitch3020 commented on What has Docker become?   tuananh.net/2026/01/20/wh... · Posted by u/tuananh
Joel_Mckay · 16 days ago
Gordon was the office pet tortoise if I recall, and might still be around given they may live a very long time. Thus it became the default user in parts of their software. =3
bmitch3020 · 16 days ago
Gordon unfortunately passed away in 2023: https://x.com/solomonstre/status/1637537983988629504
bmitch3020 commented on What has Docker become?   tuananh.net/2026/01/20/wh... · Posted by u/tuananh
amelius · 16 days ago
What I hate about docker and other such solutions is that I cannot install it as nonroot user, and that it keeps images between users in a database. I want to move things around using mv and cp, and not have another management layer that I need to be aware of and that can end up in an inconsistent state.
bmitch3020 · 16 days ago
> What I hate about docker and other such solutions is that I cannot install it as nonroot user

There's a rootless [0] option, but that does require some sysadmin setup on the host to make it possible. That's a Linux kernel limitation on all container tooling, not a limitation of Docker.

> and that it keeps images between users in a database.

Not a traditional database, but content addressable filesystem layers, commonly mounted as an overlay filesystem. Each of those layers are read-only and reusable between multiple images, allowing faster updates (when only a few layers change), and conserving disk space (when multiple images share a common base image).

> I want to move things around using mv and cp, and not have another management layer that I need to be aware of and that can end up in an inconsistent state.

You can mount volumes from the host into a container, though this is often an anti-pattern. What you don't want to do is modify the image layers directly, since they are shared between images. That introduces a lot of security issues.

[0]: https://docs.docker.com/engine/security/rootless/

bmitch3020 commented on What has Docker become?   tuananh.net/2026/01/20/wh... · Posted by u/tuananh
radioradioradio · 16 days ago
Seems like (according to the author) whatever docker is doing it is a sign of their immediate demise and everyone on HN is cheering for the company to go down in flames no matter what.

The tech is open source and free forever - thats somehow a problem? The company monitised enterprise features, while keeping core and hub free - also a problem? Is exploring AI tools, like everyone else is? should they not? should they just stay stagnant? Has made hardened images free instead of making that a premium feature only for people in banks? - and monitising SLAs, how is that a problem?

Docker is still maintaining the runtime on which orbstack, podman etc are all using, and all the cloud providers are using, but apparently at the same time Docker is deeply irrelevant and should not make money - while all of us on HN with well paid tech jobs get to have high thoughts on their every move to pay their employees and investors...

bmitch3020 · 16 days ago
I agree with a lot of the above, but then there's:

> Docker is still maintaining the runtime on which orbstack, podman etc are all using, and all the cloud providers are using

I need to fact check that one. runc was donated by Docker to OCI a while back. And containerd was created under the CNCF from a lot of Docker code and ideas. podman is sitting on the RedHat containers stack, which has their own code base. Docker itself uses runc and containerd, and so do most Kubernetes deployments. Many of these tools go to containerd directly without deploying the Docker engine.

bmitch3020 commented on What twenty years of DevOps has failed to do   honeycomb.io/blog/you-had... · Posted by u/mooreds
bmitch3020 · 22 days ago
DevOps only failed in that so many don't know what it is.

DevOps isn't a tool, but there are lots of tools that make it easier to implement.

DevOps isn't how management can eliminate half the org and have one person do two roles, specialization is still valuable.

DevOps isn't an organization structure, though the wrong org structure can make it fail.

DevOps is collaboration. It's getting two distinct roles to better interoperate. The dev team that wants to push features fast. And the ops team that wants stability and uptime.

From the management side, if you aren't focused on building teams that work well together, eliminating conflicts, rewarding the team collectively for features and uptime, and giving them the resources to deliver, that's not a DevOps failure, that's a management failure.

u/bmitch3020

KarmaCake day143September 5, 2017
About
OSS maintainer of OCI projects, including regclient, olareg, and a few of the specs.
View Original