Plash
Dev tools
container tool
SHOW HN2018
66points
30comments
#642of 2,155 in 2018
Top 30%of 2018 by points
How HN took it
CuriousMostly questions and neutral comments
1 positive, 7 neutral or asking, 0 mixed, 4 critical, out of 12 comments about the project. Thread score -0.22.
Docs: 1 for, 3 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Unprivileged, no root daemon approach is appealing
From 2 comments
Really cool, I like the documentation on the website - would be nice if the README was actual HTML though. Does that mean I can build container images within a running container…
miduil on HNWill this run alongside virtual box? (In other words, does it need hyper-V turned on on a windows box?
projectramo on HN
Objections
Name collides with existing Plash project
From 1 comment
Unfortunate name choice. There's already a Plash [1,2] project for the Principle Least Authority Shell. [1] http://www.cs.jhu.edu/~seaborn/plash/html/ [2]…
naasking on HN
README wording about security is misleading; no isolation
From 1 comment
I find the first item in the README a bit misleading: ``` Security: plash containers run completely unprivileged. ``` What this actually means is that plash containers run as the…
anarcat on HN
Requests
Comparison with Docker CLI commands
From 1 comment
Some comparisons between the cli of plash and equivalent commands in docker (only because I'm already familiar with it) would be pretty helpful.
bthornbury on HN
Dockerfile compatibility
From 1 comment
Are there any plans to be backwards-compatible with Dockerfiles and ‘docker-build’?
axtn on HN
Questions
How does it compare to gVisor
From 1 comment
How is this different from gVisor? Not complaining, this looks very awesome. I am just interested. This is going to be a great world when we have arbitrary nesting of containers,…
etaioinshrdlu on HN
Can it build Docker images inside CI containers
From 2 comments
How would you use this to build a docker container within a docker container? This would be an interesting use case for continuous integration where you might have ephemeral…
gravypod on HNReally cool, I like the documentation on the website - would be nice if the README was actual HTML though. Does that mean I can build container images within a running container…
miduil on HN
Alternatives named
bubblewrap
From 1 comment
https://github.com/projectatomic/bubblewrap This is the most promising one I've seen.
bthornbury on HN
kaniko
From 1 comment
Check out kaniko, we built it for that exact use case: github.com/GoogleContainerTools/kaniko
dlor on HN
gVisor
From 1 comment
gVisor is primarly focused on isolation, plash actually only wants to containerize processes and leaves optional isolation to other tools if required (potentially gVisor). To…
ihucos on HN