Post by @stefano@bsd.cafe

Stefano Marinelli
@stefano @bsd.cafe

This morning, I'm dealing with two different stacks for the same goal: a specific PHP deployment.

In one setup, the developers sent me a Docker stack. It builds the images, then mixes and matches the contents of the containers, then runs a whole series of deployment scripts so the developers can upload their changes, trigger the deployment scripts from their build agent, and so on.

The second one: I set up FreeBSD jails with the various components, along with an SFTP space accessible over VPN, where the developers can upload their updated files.

Then I asked them to give both setups a try.

Guess which one we're going to put into production?

#FreeBSD #Docker #KISS #Simplicity

32 likes
Refresh interactions
9 boosts
Replying to @stefano@bsd.cafe
Juan Camós
@jcamos @bsd.cafe
Replying to @chrism
Stefano Marinelli
@stefano @bsd.cafe

@chrism yes!

Replying to @stefano@bsd.cafe
Nux
@Nux @fosstodon.org

@stefano Docker? :D

Replying to @Nux@fosstodon.org
Stefano Marinelli
@stefano @bsd.cafe

@Nux ....no :-)

Replying to @stefano@bsd.cafe
release_candidate
@release_candidate @bsd.cafe

@stefano I have little hope that they choose the simplest solution.

Fortunately, "docker" is not a buzzword these days. Otherwise I'd have zero hope.

Stefano Marinelli
@stefano @bsd.cafe

@release_candidate they did. @BastilleBSD is out friend.

Replying to @stefano@bsd.cafe
release_candidate
@release_candidate @bsd.cafe

@stefano @BastilleBSD that's great news!

Replying to @stefano@bsd.cafe

@stefano from the exploration it’s clear it’s jails, however a linux container solution is portable and reproducible locally. Not sure if this counts for jails.

Replying to @resmo@mstdn.social
Stefano Marinelli
@stefano @bsd.cafe

@resmo it does, but in a different way. More, they have an identical stack for testing on another server.
There’s (generally) no need to have the very exact stack for development and production.

Replying to @stefano@bsd.cafe
René Moser (resmo) レネ
@resmo @mstdn.social
Public en edited

@stefano tbh, docker and jails are very different, linux containers lxc would look more similar. It’s been a while since I’ve used jails though

Replying to @resmo@mstdn.social
Stefano Marinelli
@stefano @bsd.cafe

@resmo sure. They still are. Anyway, you can replicate via podman on FreeBSD (there’s a lot of work on OCI containers).
I like docker, don’t get me wrong. But sometimes it’s perceived as a shortcut for faster deployment, which is ok but if it’s done in the right way.

Replying to @stefano@bsd.cafe

@stefano I don’t like docker much tbh, it was good for its time 🤓 but podman is the way to go on Linux, jails are very nice I would not complain

Replying to @resmo@mstdn.social
Stefano Marinelli
@stefano @bsd.cafe

@resmo I prefer podman, too

Replying to @stefano@bsd.cafe
Nux
@Nux @fosstodon.org

@stefano @resmo what do you guys think of multikernel? seems like container++ multikernel.io/faq.html

Replying to @Nux@fosstodon.org
Stefano Marinelli
@stefano @bsd.cafe

@Nux @resmo I’ve never tried it. I will, thank you for the link!

Replying to @stefano@bsd.cafe
Franz Graf
@fgraf @hachyderm.io

@stefano omg wasn't the advantage of PHP that you CAN build sth without a stack? :-/

Replying to @fgraf@hachyderm.io
Stefano Marinelli
@stefano @bsd.cafe

@fgraf yes, exactly. But people are used to node, etc so they somehow “build” stuff. Then they understand they can do without building and are much happier

Replying to @stefano@bsd.cafe
Pete Orrall
@peteorrall @bsd.cafe

@stefano Do the developers know they'll be using previous details?

Replying to @peteorrall@bsd.cafe
Stefano Marinelli
@stefano @bsd.cafe

@peteorrall previous details?

Replying to @stefano@bsd.cafe
Pete Orrall
@peteorrall @bsd.cafe
Public en edited

@stefano Hahahaha! Voice to text failed spectacularly there. It was "FreeBSD Jails" not "previous details."

Replying to @peteorrall@bsd.cafe
Stefano Marinelli
@stefano @bsd.cafe

@peteorrall ahah not it’s clearer!
Yes, they do. I always explain them in detail and let them decide. And 9 times out of 10, they decide that jails are a better choice.
I’ve just received an email from a dev and I’ll post it later.

Replying to @stefano@bsd.cafe
Mason Loring Bliss
@mason @partychickens.net

@stefano For what it's worth, it's not too hard to achieve very jail-like results with LXC. You can even map each jail to it's own unique unprivileged UID range. It's what I'm doing instead of VMs these last few years.

Stefano Marinelli
@stefano @bsd.cafe

@mason yes, true. I had been using lxc containers when docker wasn’t even available, as I tried to replicate the jails on Linux (as much as possible) almost 15 years ago

Replying to @stefano@bsd.cafe
gaunilone
@gaunilone @mastodon.social