helloiamaperson
helloiamaperson on Hacker News
Since you're doing research in this area, have you taken a look at something like
https://www.dyadicsec.com/ at all? I looked at the whitepaper a while ago, and it seemed to make sense, though I was way out of my depth.
I'd love to hear more about your solution. Are you saying that you've created an algorithm distinct from paxos/raft/zab that's more robust?
Being able to rebuild critical infrastructure from source, and know that you'll be able to reliably deploy it, is a _huge_ win for security.In that case, you might be interested in bosh: http://bosh.io/docs/problems.html (the tool that enables the workflow jacques_chester was describing). It embraces the idea of reliably building from source for the exact reasons you've mentioned.
You should take a look at
https://bosh.io/ . It does what you want wrt devs being responsible for defining how the software runs, environment reproducibility, etc. Unfortunately, the learning curve is pretty steep.
As Titanous said, BOSH operates at a lower level than Flynn. You could use BOSH to deploy Flynn, hypothetically. A more direct comparison would be Cloud Foundry.
> I'm pretty sure it's quite valuable, though I'm also unclear what people would be willing to pay.
Your solution probably works great for your needs, but this stuff is expensive to productize. See https://www.openshift.org/
> One PaaS with developers in mind is
https://nodechef.com It would be interesting to see how they do.
Is this your product? All of your comments are about it.
Terraform's model (local state files) is not something that works well, in my opinion. Since AWS doesn't know that you want some operations done "transactionally" (like with CloudFormation), you can easily end up with a half built env that needs to be cleaned up. PaaSTa is more of a CF competitor, as far as I know, not really at the same abstraction level. I think that it would be a lot easier to clean up the UX/marketing of BOSH than doing the opposite.
You mention Puppet and Chef, but how does it compare to more holistic tools like terraform, juju, and bosh?
I'd love to hear more about your use case and what I could do to improve the situation. You can contact me with the email address in my profile if you're interested. Thanks!
> Hell, you need a separate VM just to install it.
I'm not sure why that's a problem. If you want something that's actually like heroku like in terms of uptime and what not, you need something that can manage the health of the cluster. Dokku's cool, but it doesn't make sense for anything you actually need to depend on. If it doesn't make sense to pay for the overhead of running your own paas, just use Heroku instead.
> With Nix it seems like the technology is there. It works. It has a superior model compared with other systems. However, it lacks a corporate sponsor or large community to make it "professional-grade". Canonical and RedHat make their money from people depending on their packages being continuously up to date.
Check out bosh: http://bosh.cloudfoundry.org/ . It has a somewhat similar philosophy with respect to immutable instances and systems at large, and has strong corporate backing.