Figure
Infrastructure
self-hosted paas
SHOW HN2015
31points
6comments
#892of 2,565 in 2015
Top 35%of 2015 by points
How HN took it
QuietFewer than 5 comments about the project
1 positive, 2 neutral or asking, 0 mixed, 1 critical, out of 4 comments about the project.
Privacy: 0 for, 1 againstIdea: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Good idea for using Fig in production
From 1 comment
Nice, when I started using docker and came across fig I wondered how suitable it would be for production. Will check this out later.
mikewhy on HN
Described as cute
From 1 comment
* Add figure ALL=(ALL) NOPASSWD:ALL to sudoer file. This is cute.
richo on HN
Objections
Sudoers NOPASSWD entry is a security concern for app deletion
From 1 comment
* Add figure ALL=(ALL) NOPASSWD:ALL to sudoer file. This is cute.
richo on HN
Requests
Isolate the root-level deletion utility, e.g. a setuid delete-container helper
From 2 comments
I assume you mean data outside the container? Maybe you could at least silo the utility that needs to delete so that it can easily be inspected and so you don't have to trust the…
lbradstreet on HNExactly. A setuid `delort-container` utility would be a good start.
richo on HN
Questions
How to delete apps when Docker volumes are root-only accessible
From 1 comment
That's for deleting apps, since docker volumes may produce something that only root can access. Haven't found ways to get around it, any suggestions?
sorpaas on HN