News for hackers. Stuff that matters.
Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by nodesocket on Thursday June 24, 2021 @01:10AM (#27614168)
Can I also add don't run MongoDB into Docker containers. Use MongoDB Atlas or switch to AWS and DocumentDB with proper VPC and a network level firewall (security groups).

@conesus It's just not worth using discount hosting providers for this exact reason. Use a M(icrosoft) A(mazon) G(oogle) cloud, yes it costs more.... But your time is worth it!

Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by EdwardDiego on Thursday June 24, 2021 @03:12AM (#27614761)
Why not run it in containers? What's the downsides?

I mean, if you can reliably run Kafka or Postgres in containers, what's sufficiently different about MongoDB?

Or are you talking about using Docker itself as the container host as opposed to K8s or ECS etc.?

Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by higeorge13 on Thursday June 24, 2021 @04:48AM (#27615270)
I don’t get why the original response is downvoted. Of course you can run those in docker containers, but it is generally suggested that you don’t. From my experience i would run stateless services in containers and persistent storages in vms, dedicated servers, or cloud services.
Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by the_duke on Thursday June 24, 2021 @06:04AM (#27615701)
People have been running database instances just fine on their own for decades, without the help of "big brother".

There are reasons why running a high performance database instance in containers is problematic, but security is not one of them - not any more so than application containers.

You just need to know what you are doing, it's not a black art.

Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by SOLAR_FIELDS on Thursday June 24, 2021 @08:29AM (#27616533)
Truth - I personally avoid doing so, but that’s only because I prefer not to introduce that extra layer of complexity into my stack due to lack of full understanding of the technology. There’s nothing stopping me from bothering to learn all the trade offs and pitfalls and doing so, but so far there hasn’t been enough of a compelling reason for me to go through that effort. I just go with the general advice “you usually don’t want to dockerize stateful applications” and leave it at that.
Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by higeorge13 on Thursday June 24, 2021 @08:39AM (#27616632)
I was not referring to security, otherwise completely agree.
Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by EdwardDiego on Thursday June 24, 2021 @07:47AM (#27616235)
> it is generally suggested that you don’t.

What's the difference between a container and a instance in a cloud service?