News for hackers. Stuff that matters.

A comment on Anti-patterns when building container images. Parent comment

Re:Anti-patterns when building container images by xuhu on Thursday December 02, 2021 @09:08AM (#29416235)
There is probably no nsenter equivalent for "kubectl exec thepod -- /bin/sh" if you can't ssh into the node.
[ Parent | on HN ]
Re:Anti-patterns when building container images by mook on Thursday December 02, 2021 @11:17AM (#29418077)
For non-production clusters, you may be able to play with ephemeral containers† if turning on the feature gate seems reasonable.

† https://kubernetes.io/docs/tasks/debug-application-cluster/d...

[ Parent | on HN ]
Re:Anti-patterns when building container images by gizdan on Thursday December 02, 2021 @09:20AM (#29416382)
Minimal containers shouldn't need that though. Your logs should tell you enough about the application it's running. K8s (get/describe) should tell you about the lifecycle of the pod. Lastly something like "dive" should tell you all you need about the image's file layout.
[ Parent | on HN ]
Re:Anti-patterns when building container images by gouggoug on Thursday December 02, 2021 @09:25AM (#29416480)
> Minimal containers shouldn't need that though.

In theory. In practice this is only rarely the case.

[ Parent | on HN ]