News for hackers. Stuff that matters.

A comment on The sad state of sysadmin in the age of containers. Parent comment

Re:The sad state of sysadmin in the age of containers by tracker1 on Wednesday April 22, 2015 @02:05PM (#9422285)
With docker, as referenced in TFA... you can simply vet a base image, and use that for your application... upgrades? create a new/updated base image and test/deploy against that.
[ Parent | on HN ]
Re:The sad state of sysadmin in the age of containers by retrogradeorbit on Thursday April 23, 2015 @05:21AM (#9425606)
And how do you "simply vet a base image"?
[ Parent | on HN ]
Re:The sad state of sysadmin in the age of containers by garthk on Thursday April 23, 2015 @07:46PM (#9430640)
Same as everything: look at how it was built. Many of the images are built by CI systems according to Dockerfiles and scripts maintained in public GitHub repos. Audit those, then use them yourself if you're worried about the integrity of the services and systems between the code and the repository.
[ Parent | on HN ]