Post by @stefano@bsd.cafe
This morning, I'm dealing with two different stacks for the same goal: a specific PHP deployment.
In one setup, the developers sent me a Docker stack. It builds the images, then mixes and matches the contents of the containers, then runs a whole series of deployment scripts so the developers can upload their changes, trigger the deployment scripts from their build agent, and so on.
The second one: I set up FreeBSD jails with the various components, along with an SFTP space accessible over VPN, where the developers can upload their updated files.
Then I asked them to give both setups a try.
Guess which one we're going to put into production?
32 likes
marf@marf@gts.thinginger.xyz
Tomáš Odehnal@tomas@odehnal.online
9 boosts
@stefano I have little hope that they choose the simplest solution.
Fortunately, "docker" is not a buzzword these days. Otherwise I'd have zero hope.
@stefano from the exploration it’s clear it’s jails, however a linux container solution is portable and reproducible locally. Not sure if this counts for jails.
@resmo it does, but in a different way. More, they have an identical stack for testing on another server.
There’s (generally) no need to have the very exact stack for development and production.
@stefano tbh, docker and jails are very different, linux containers lxc would look more similar. It’s been a while since I’ve used jails though
@resmo sure. They still are. Anyway, you can replicate via podman on FreeBSD (there’s a lot of work on OCI containers).
I like docker, don’t get me wrong. But sometimes it’s perceived as a shortcut for faster deployment, which is ok but if it’s done in the right way.
@stefano I don’t like docker much tbh, it was good for its time 🤓 but podman is the way to go on Linux, jails are very nice I would not complain
@stefano @resmo what do you guys think of multikernel? seems like container++ https://multikernel.io/faq.html
@fgraf yes, exactly. But people are used to node, etc so they somehow “build” stuff. Then they understand they can do without building and are much happier
@stefano Hahahaha! Voice to text failed spectacularly there. It was "FreeBSD Jails" not "previous details."
@peteorrall ahah not it’s clearer!
Yes, they do. I always explain them in detail and let them decide. And 9 times out of 10, they decide that jails are a better choice.
I’ve just received an email from a dev and I’ll post it later.
@stefano For what it's worth, it's not too hard to achieve very jail-like results with LXC. You can even map each jail to it's own unique unprivileged UID range. It's what I'm doing instead of VMs these last few years.
@mason yes, true. I had been using lxc containers when docker wasn’t even available, as I tried to replicate the jails on Linux (as much as possible) almost 15 years ago
💪