On the Weaponisation of Open Source

Re:On the Weaponisation of Open Source by squiffsquiff on Saturday March 19, 2022 @05:08AM (#30732309)

I hate to burst your bubble, but Anton Babenko's terraform modules are extremely popular. The difference here is that he added a input with a default value to a specific release version. Generally, if you're using terraform professionally you'd either fork or mirror the module and pin to a specific version. In such case this change would not affect you. If you had e.g. something in development calling 'latest' version of an impacted module you again would not see this. It's an optional argument that defaults to a value causing no outward change in behaviour.

[ Parent | on HN ]

Re:On the Weaponisation of Open Source by fxtentacle on Saturday March 19, 2022 @05:42AM (#30732452)

I'd bet you that 95% of all programmers can't even explain from memory what exactly Terraform is.

Case in point, I have no idea. I know it's something related to the cloud but none of my clients are using it.

And their Wikipedia article is filled with buzzwords and no explanation of what it does, which doesn't exactly give me confidence that it'll be useful for regular companies. "Infrastructure as code"... so Ansible or docker compose? In any case, you don't need it if 2 HA bare metal servers do the job.

[ Parent | on HN ]

Re:On the Weaponisation of Open Source by paulgb on Saturday March 19, 2022 @05:59AM (#30732516)

I’ll try: Terraform replaces all the actions you’d do in the AWS (or other cloud provider) console or API with declarative configuration code. This means you can parametrize it, version control it, compose it, etc. and generally treat it like code.

It would be overkill for many things that have a single, fairly static configuration, but for things like ensuring that a dev and prod cluster have the same configuration, it’s a lifesaver.

[ Parent | on HN ]

Re:On the Weaponisation of Open Source by fxtentacle on Saturday March 19, 2022 @07:01AM (#30732810)

That is a great summary :) and it highlights the value proposition that I was missing:

Version Control for Cloud Configurations

[ Parent | on HN ]

Re:On the Weaponisation of Open Source by Drdrdrq on Saturday March 19, 2022 @05:29PM (#30737737)

It is also awesome, easy to use and very convenient. If you are configuring anything through AWS web GUI, you should give Terraform a go, you won't regret it.

(not affiliated in any way, just a happy user)

[ Parent | on HN ]

Re:On the Weaponisation of Open Source by zaik on Saturday March 19, 2022 @06:24AM (#30732622)

> 95% of all programmers can't

That's a lot of people who can.

[ Parent | on HN ]

Re:On the Weaponisation of Open Source by hansel_der on Saturday March 19, 2022 @07:23AM (#30732922)

about as much as ferrari owners.

i don't know any, but they sure do exist

[ Parent | on HN ]