News for hackers. Stuff that matters.

A comment on Mirage – A programming framework for building type-safe, modular systems. Parent comment

Re:Mirage – A programming framework for building type-safe, ... by pjmlp on Friday November 24, 2023 @07:02AM (#38403102)
In the kind of corporate environments I work on, you won't be doing any SSH into the production containers.

Nothing that a classical UNIX admin would expect is installed on those images.

[ Parent | on HN ]
Re:Mirage – A programming framework for building type-safe, ... by isilofi on Friday November 24, 2023 @08:19AM (#38403689)
Yes. Welcome to the hell of "No debugging, no fixing anything. Call vendor support and hope for the best"
[ Parent | on HN ]
Re:Mirage – A programming framework for building type-safe, ... by pjmlp on Friday November 24, 2023 @09:21AM (#38404220)
It is more like, what isn't there can't be used for CVEs.
[ Parent | on HN ]
Re:Mirage – A programming framework for building type-safe, ... by Tainnor on Friday November 24, 2023 @09:10AM (#38404102)
Those kind of corporate environments would also never use a technology like MirageOS that very few people know how to use.
[ Parent | on HN ]
Re:Mirage – A programming framework for building type-safe, ... by pjmlp on Friday November 24, 2023 @09:23AM (#38404240)
In those kind of corporate environments liability is a concern, and something like MirageOS would be quite appealing.

These are the same kind of environments where CI/CD can only fetch from internal repos, where stuff only gets installed after IT and legal had a say on it.

[ Parent | on HN ]
Re:Mirage – A programming framework for building type-safe, ... by insanitybit on Friday November 24, 2023 @10:26AM (#38404896)
Sure they would. I've be interested in Mirage and I don't believe that developers should have SSH access to systems.

I could see the value in a debug port or something, though. But giving full remote code execution is total overkill.

[ Parent | on HN ]
Re:Mirage – A programming framework for building type-safe, ... by mk89 on Friday November 24, 2023 @09:16AM (#38404152)
... we had to wait for k8s 1.25 to get ephemeral containers to get some tools ... (https://kubernetes.io/docs/tasks/debug/debug-application/deb...)
[ Parent | on HN ]