Re:My VM is lighter (and safer) than your container (2017)
by bluGill on Tuesday May 14, 2024 @08:43AM
(#40354611)
There is no such thing as a reproducible build environment anymore. You can get a temporary reproducible build environment, but any sane security policy will have certificates that expire and that in turn means that in a couple years your build environment won't be reproducible anymore.
[ Parent
| on HN ]
Re:My VM is lighter (and safer) than your container (2017)
by cesarb on Tuesday May 14, 2024 @09:04AM
(#40354809)
> but any sane security policy will have certificates that expire and that in turn means that in a couple years your build environment won't be reproducible anymore.
"Reproducible" is usually defined as "identical output except for the cryptographic signature at the end" (and that should be the only use for a certificate in your build environment, a high-quality build environment should be self-contained and have no network access). That is, once you remove the signature, the built artifacts should be bit-by-bit identical.
Re:My VM is lighter (and safer) than your container (2017)
by bluGill on Tuesday May 14, 2024 @11:44AM
(#40356444)
I said environment not build.
Re:My VM is lighter (and safer) than your container (2017)
by andix on Tuesday May 14, 2024 @09:01AM
(#40354765)
If you run multiple instances of a container image, you get a reproducible environment.
If you run a docker build multiple times, and copy a few files into the container, you get a reproducible container image. It is not a hash perfect duplicate, but functionally equivalent.
If builds of your favourite programming language are reproducible or not, is not really related to VM vs. Container.