Build it in the go image, copy it over to a scratch image and you are golden, a few megs of overhead from scratch container and startup times are milliseconds@@PankajDhande
AWS with 80 million different services all linked creating points of failure at places you’d have to pay someone from Amazon to fix plus a bill every month that rivals a small countries GDP vs a metal box with 10G uplink and redhat with automation scripts you personally built and know how to fix any piece that could fail. Every company runs to option A
@@koalakakes I am not sure if it is that it is more secure but I do put more stock in OSS especially from the security aspect as it is security by... peer-review (and you can actually look into how it is done) rather than by obscurity
Yup. Still very much applies. We went 'round and 'round on Docker and finally just decided to go "serverless" - i.e. IaaS through one of the big cloud providers. Really just punted the whole argument.
what? I thought this was NEW! scrolled up to check the date... now I'm sad because i was literally laid off from a company that did EXACTLY this. Moved an enterprise system running on Red Hat VMs into docker/kubernetes just to have "consistent architecture." Turns out that meant "so we could move all the work offshore."
im also german and can validate that it happens exactly in this way! its also proove that we germans were ahead of its time! we lost becasue of this failure :( dont repeat our errors and learn.
With extra steps. The developer had to make it work again in a docker container. If it was really shipped from his machine without extra steps it would be an ISO file of his whole memory and OS
@@DavidChiluksorry, still learning here, whats wrong with it? Is it because you just run everything there with sudo? What if you made sure the script wont run anything harmful?
I just got this right now because I literally had a problem with the darned nginx acme thing. And yes.its 2023 and I still use docker-machine, and I'm even building my own core-os image for it with upgrades and shit because I refuse to pay for docker enterprise.
@@monad_tcphuh? if you are not using any of docker's enterprise tooling , it is free. I always use the cli /engine version, i don't need desktop. And i do not need scans. why not use official images where they are available?
There was some point during this video that I was practically predicting half of his rant and screaming YES! YES! when he said it. At that point I suddenly realized I was agreeing with Hitler and it made me feel a bit awkward...
Even now, 7 years after this video I still think to myself: Why aren't we just running a VM for this? Why does everything need to be so hypercomplicated?
RHEL5 still receives security updates and bug fixing through ELS, and will continue to do so until 2020. And when this video was made, RHEL5 was still a year away from the end of the maintenance support phase (no ELS subscription required).
You nailed the timing. "You might as well use 'curl | sudo bash' " killed me because that is common now (sans sudo). My life is better for having seen this. Thank you.
This video is still relevant today. Had to dockerize all the servers at a company I did Intership for. There were a ridiculous amount of vulnerabilities in the way the services worked.
#Meltdown. #Spectre. 6.1.4 Containers We evaluated Meltdown running in containers sharing a kernel, including Docker, LXC, and OpenVZ, and found that the attack can be mounted without any restrictions. Running Meltdown inside a container allows to leak information not only from the underlying kernel, but also from all other containers running on the same physical host. The commonality of most container solutions is that every container uses the same kernel, i.e., the kernel is shared among all containers. Thus, every container has a valid mapping of the entire physical memory through the direct-physical map of the shared kernel. Furthermore, Meltdown cannot be blocked in containers, as it uses only memory accesses. Especially with Intel TSX, only unprivileged instructions are executed without even trapping into the kernel. Thus, the isolation of containers sharing a kernel can be fully broken using Meltdown. This is especially critical for cheaper hosting providers where users are not separated through fully virtualized machines, but only through containers. We verified that our attack works in such a setup, by successfully leaking memory contents from a container of a different user under our control.
I worked for a large Fortune 100 in 2015. Wish the executives had seen this. Probably would have gone over their heads - but literally every point made was spot on
Let's put all our services in kubernetes, google uses it you know. How many engineers do we need? 5? yeah that'll turn out well. --- Great Mistakes in History
Lmao. I've grown to like Docker over the years. It was confusing 5 years ago, but I really love it now. This is my favorite version of this meme. Dankie.
These dockerized environments become very funny when someone asks how to backup & restore them. A large company (s**m*ns) actually came up with the "brilliant" Idea to run them on a Vmware VM and make veeam backups. :D
. OMG! The timing of each point is sooooo SYNCHED! Understanding the tech talk makes me appreciate the splicing of his rant vs subtitle! hahahaha! BRAVO! .
Holy shit how did i miss this seven years ago? I'm so glad the docker hype is over (not glad it's become a standard tool though). And glad i dont currently need to deal with it. I actually introduced a company i worked for docker around the time of this video. I was pretty adament that everyone used it, but ONLY to create reproducible dev environments. It saved us a lot of time and headaches, prior to it we were copying over mountains of php scripts and database backups then assembling our local environments by hand. Countless examples of "works on my machine" bugs. It was a small company, we used a staging server and production server. Pull changes from git on staging, run tests, push to production. Docker would've only introduced new problems and time cost. These days I'm all about Nix for the "reproducible" part. Linux containers are still useful too but don't ever think they are virtual machines!!! I realized docker was bloat when i wrote scripts to set it up, then realized my scripts added a new layer of bloat, decided to automate the OS actions docker did instead, then realized the only part of it I wanted was the linux containers that you dont need docker to use!!!
Ah, a fellow nixos user. I've been pushing for nix + zfs rack servers at work, but I'm already happy to have podman to escape the jail of the old RHEL VMs that we don't have sudo on. I'm still annoyed that we basically pay 10x overhead for VMs to run things on someone elses machine for "scalability", when ZFS for vertical upgrades & nixops for horizontal scaling would solve basically every scalability issue we would have.
@@Levelworm well you don't, people usually run something like Linux Alpine in prod (which is a very very bare bones distro of Linux). They usually only use full blown OS's in containers if they also build in containers.
As a Software Engineer who just knows how to write docker files, github workflows and how to set up virtual machine. I think i need to learn more to understand this video.
As a German it is actually rather difficult to ignore the spoken text. But it is hilarious to actually be able to see a Hitler parody without a VPN, because ironically many historical youtube videos about Hitler - even parodies - are censored in German youtube, unless they are mainstream TV productions. It really makes you wonder who is in power now. xD
shit Docker was relatively new back when this was posted, and this still holds up somewhat, even with K8S orchestration. Microservices are hard to implement really well.
Every spoken argument hold hard learned lessons from from failures and experience. Funny but they are valuable insights. But, "Everybody thinks they're Google!" sums up the whole.
what kind of career/job are you changing to if i may ask? Someday I want to leave too, but it's kinda hard imagining doing anything else outside of programming..
1:45 "Why do we need a docker if we're running a VM?" I absolutely hate to say it, but "angry man with little mustache" had a point. Docker sucks. What can they do a VM can't by itself? Just more layers of complexity and things to break.
![Kodak Black - Sharp Vibes [Official Music Video]](http://i.ytimg.com/vi/oEV0OoLJeIs/mqdefault.jpg)
"Those who have never used Docker in production, leave the room"
I am dying
And 80% of the room clears out lmao
@@kreglfromworld Er, I used it once in a sandbox, Mein Führer: is it OK for me to stay and listen? I'd like to get some handy tips from the guys.
That got me too lol
I almost left
if it was rust, hitler would end up talking to himself
"don't cry, you can use bash in windows 10 now" - LOL
This had me in tears
Ahahah! So excellent!
Brilliant, but I heck can't because of fat troll Windows 10... so, I bought VPS nearly life-long
That's what they told me too - and I still went down in flames.
I can't believe windows 10 is so old now.
"Container inside a container"
"Just so you can deploy a 10MB go binary"
"Don't even talk about resource constraint"
😂😂😂😂
It hit me hard cause I am currently writing a go program that is to be containerised😂
this hits way too close to home
So guilty of this lol
a 10mb STATIC binary, which means 0 dependencies
Build it in the go image, copy it over to a scratch image and you are golden, a few megs of overhead from scratch container and startup times are milliseconds@@PankajDhande
I love how she starts crying when Hitler said he's moving everyone to Windows... I felt that
I love how he said "BLOAT" right as "windows" popped up in the caption
Why we all get this recommended?
@@yourdiresir Maybe the yt algorithm talked too much to Bing.
I used git bash in windows yesterday.
Me too 😭
“You’re a bunch of node.js hipsters that just HAVE to install everything you read on Hacker News!” 😂 Dead.
I feel attacked.
@@SynapseNervosa Because you are using nodejs? Well, maybe one day you will elevate above that level.
CSS-in-JS folks having a panic-attack rn.
AWS with 80 million different services all linked creating points of failure at places you’d have to pay someone from Amazon to fix plus a bill every month that rivals a small countries GDP vs a metal box with 10G uplink and redhat with automation scripts you personally built and know how to fix any piece that could fail. Every company runs to option A
@@dolahn last used js in 2006 eh? good times
You know things are bad when a simple parody video makes you question your entire career.
Yes, indeeed
its the stage fright, may i please have my alone time in the litterbox and show that i can get a B+
"You think everything in public repo is secure because it's OSS" syncs up so well
OSS means it's secure - all my idiot devs following every trend they can
I thought the "kernel" and "colonel" homophone was well done
Also he said SS when it had OSS
@@koalakakesObviously Secure Software
@@koalakakes I am not sure if it is that it is more secure but I do put more stock in OSS especially from the security aspect as it is security by... peer-review (and you can actually look into how it is done) rather than by obscurity
It is now 2023 and this is still standing the test of time. Well done sir or madam, well done.
Damn this was 7 yrs ago??? Didnt notice until your comment
omg didn't even notice it's 7 years old
Almost even more relevant 😅
Yup. Still very much applies. We went 'round and 'round on Docker and finally just decided to go "serverless" - i.e. IaaS through one of the big cloud providers. Really just punted the whole argument.
what? I thought this was NEW! scrolled up to check the date... now I'm sad because i was literally laid off from a company that did EXACTLY this. Moved an enterprise system running on Red Hat VMs into docker/kubernetes just to have "consistent architecture." Turns out that meant "so we could move all the work offshore."
I speak German and can confirm this is 100% accurate
I also speak German and can confirm that your joke is not bad.
I'm a German historian, and I can confirm that this is 100% historically accurate
😂
im also german and can validate that it happens exactly in this way!
its also proove that we germans were ahead of its time! we lost becasue of this failure :( dont repeat our errors and learn.
As a German I can confirm that this is the most accurate translation from to German to English ever done by human kind
Some say that Docker was invented because a developer used the age old "it works on my machine" and the solution was to ship the whole machine.
this sounds like a joke but is actually true
With extra steps. The developer had to make it work again in a docker container. If it was really shipped from his machine without extra steps it would be an ISO file of his whole memory and OS
"You might as well curl | sudo bash!" I died
That sounds like a euphemistic slur right there.
I do this all the time.
IBM used to expect people to install their cloud management binaries this way. When I asked them about this, they didn't understand my issue with it.
@@DavidChiluksorry, still learning here, whats wrong with it? Is it because you just run everything there with sudo? What if you made sure the script wont run anything harmful?
@@dhpz the only prob is that no one (including me) reads the bloody script anyway ... I just sudo do so :)
The best line... "I'm moving everyone to Windows! ... Don't cry, you can run bash on Windows 10 now."
I died laughing 😂
damn, I laughed out loud at that too... almost choked on my lunch!
Once you have a hammer, everything looks like a nail.
OpenStack is the hammer to nail all nails though, that's the tempting thing :)
"If I had a hammer, I 'd hammer it in the morning, I'd hammer it in the evening, all over this land."
This is the most witty (technically accurate!) parody of this genre I have ever seen .. I laughed out loud many times
Hitler tried functional programming / haskell
I don't think this is a laughing matter. This is serious. Can happen to anyone.
I agree! It’s also the only one I’ve seen!
It's so accurate, I almost didn't laugh and almost cried
Have you seen the Hitler tries IP telephony one?
How did I miss this years ago? It’s so on point!
I just got this right now because I literally had a problem with the darned nginx acme thing.
And yes.its 2023 and I still use docker-machine, and I'm even building my own core-os image for it with upgrades and shit because I refuse to pay for docker enterprise.
@@monad_tcphuh? if you are not using any of docker's enterprise tooling , it is free. I always use the cli /engine version, i don't need desktop. And i do not need scans. why not use official images where they are available?
Algorithm is doing the reunion thing
@@Heynmffc This is hilarious
The algorithm had to let it cook in the oven a little more
There was some point during this video that I was practically predicting half of his rant and screaming YES! YES! when he said it. At that point I suddenly realized I was agreeing with Hitler and it made me feel a bit awkward...
but he was right, right?
@@mrjebiga7540yes, far right
"I'm moving everyone to Windows!"
Whoa there, _Hitl-_ ...nevermind.
2023 and I'm dying here laughing. "Why do we need docker if we're running a VM? A container inside a container" 🤣🤣
All the laughing in this thread comes from the infra engineers.
@@DjTonioRoffo Hahah, I'm a Data Scientist though, but I still feel the pain.
@@Sgt_duck it is just coz you can't cook them. I do not feel pain at all. I would prefer containers to vms
Stalin: “But it works in my country!”
I can speak German and can confirm that this is how most tech meetings are conducted within major tech companies in Germany.
This was by far, the absolute best Downfall parody ever. It was even better than the GNOME 3 one.
"Don't cry, you can run bash on Windows 10 now" is perhaps the best line ever added to these parodies
Even now, 7 years after this video I still think to myself: Why aren't we just running a VM for this? Why does everything need to be so hypercomplicated?
because it helps programmers, not sys admins
Because VM doesn't have a equivalent thing as DockerHub
@@insanitygamer_vibingOr it helps sysadmins think they’re programmers?
As Terry Davis once said, "idiots admire complexity".
@@augustday9483 K_I_S_S
As a DevOps Engineer ... 100% accurate.
"engineer"
@@refutonefandus"gin"
@@refutonefandus he no ordinary engineer, that bad ass is an Engineer, dont mess with Engineero or you get a bangeero
""@@HowDoYouUseSpaceBar
mess with a dick you get fucked @@horuscoming
"you might as well use `curl | sudo bash`" lol
what does that actually mean? Download all your root's stdout messages?
No man, haha. It means execute what ever you are downloading as root.
open a backdoor directly into your things lol
No - do `sudo bash -c "$(curl -fsSL example.com/some-script.sh)"`
I had to check that I was still breathing at the end. Everything hurts from laughing so much. "They still have Red Hat 5 installed." OMG help me.
+Anna Filina More like help them if they still on RHEL5.
I thought he meant pre-RHEL Redhat 5...
RHEL5 still receives security updates and bug fixing through ELS, and will continue to do so until 2020. And when this video was made, RHEL5 was still a year away from the end of the maintenance support phase (no ELS subscription required).
Oh wow, the internet is a small space, look who I found ;)
true even today
Amazing. Thanks for putting this together, I was in tears
+Andrew Cathrow me too!
“People even think Docker is configuration management” - this scene made me cry 😭
"Everybody thinks they're Google!" So, so true.
"All that cgroups black magic and it still can't stop a simple fork bomb" 💀
Wow, this still applies in 2023. Dude is Nostradamus
I applaud the person who made this, absolutely brilliant. many lols were had
You nailed the timing. "You might as well use 'curl | sudo bash' " killed me because that is common now (sans sudo). My life is better for having seen this. Thank you.
What does curl | sudo bash do?
@@vicradon It downloads a script from a web address and immediately runs it with administrator privileges
Thank you@@RisingDad
@@vicradon Let's all just thank the author of this fine video
As a casual developer, this is absolutely brilliant.
pfft amateur, competitive development is where it’s at
@@ivchatov do you even RDD bro? Resume Driven Development
@@ivchatov codeforces :)
pastebin is my IDE fn greenhorns. @@halcyonramirez6469
Why? Docker is great for development. On a development machine with different databases and keycloak and so on.
2:06 "if you break your legs, it's hard to cook orangutan" lmao
bruuh 💀💀💀
Hi. I just wanted to drop a comment in here from the year 2020: this is still relevant. :D
Jorn Knuttila the comment I was looking for!!
@@RCynik It just needs someone to update it for Kubernetes!
2024.... Still relevant 😢
This video is still relevant today. Had to dockerize all the servers at a company I did Intership for. There were a ridiculous amount of vulnerabilities in the way the services worked.
I love the way at 2:54, "bloat" lined up perfectly with the translation "Windows"
Instant classic. Bravo!
"Blut" means blood in German.
He shouts "blöd" meaning stupid. Prefect timing.
@@jimmyocallaghan9124 Looks like a win any way you put it.
Even better, "OSS" lines up with "SS"!
underrated comment :D
"I'm moving everyone to Windows!"
*cries*
This 😂😂
"Don't cry, you can run bash on Windows 10 now"
Well done, you hit every nail on the head with this one lol.
Haha - "if you've never used Docker in production, leave the room now."... in real life, room empties.
Your clip owns the Internets now
> in real life, room empties
that didn't age well, almost everybody uses containers now, even front-end devs
Lol
it's seven years later and everyone's Grandma uses docker in production 😂
It is 2021 and I'm still laughing to this video :))
... 2023
@@ethzero… 2024
@@danielmcpherson90622023
Almost 2024 and no one's laughing, everyone and their mom wants to run docker.
#Meltdown. #Spectre.
6.1.4 Containers
We evaluated Meltdown running in containers sharing a kernel, including Docker, LXC, and OpenVZ, and found that the attack can be mounted without any restrictions. Running Meltdown inside a container allows to leak information not only from the underlying kernel, but also from all other containers running on the same physical host.
The commonality of most container solutions is that every container uses the same kernel, i.e., the kernel is shared among all containers. Thus, every container has a valid mapping of the entire physical memory through the direct-physical map of the shared kernel. Furthermore, Meltdown cannot be blocked in containers, as it uses only memory accesses. Especially with Intel TSX, only unprivileged instructions are executed without even trapping into the kernel.
Thus, the isolation of containers sharing a kernel can be fully broken using Meltdown. This is especially critical for cheaper hosting providers where users are not separated through fully virtualized machines, but only through containers. We verified that our attack works in such a setup, by successfully leaking memory contents from a container of a different user under our control.
Oww.
I keep coming back to this. Every goddamned word is so true.
You can run bash on Windows 10 now! LOL LOL
Windows 10 is the huge troll: it fails to run Ubuntu subsystem bash... it's just silently closed every time I run it on my PC.
I worked for a large Fortune 100 in 2015. Wish the executives had seen this. Probably would have gone over their heads - but literally every point made was spot on
2:25 `Suddenly people talk to me about datacenter efficiency and "hyperconverence"
Everybody thinks they're Google!`
:)
one of the best lines in this jewel :D
Let's put all our services in kubernetes, google uses it you know. How many engineers do we need? 5? yeah that'll turn out well. --- Great Mistakes in History
damn, this was 7 years ago, way ahead of its time
Lmao. I've grown to like Docker over the years. It was confusing 5 years ago, but I really love it now. This is my favorite version of this meme. Dankie.
Revisit this one after 7 years, still laughing 😂
Sane
RUclips recommanded me this while learning docker
I think i've learned more about docker from this video than any help videos i've ever found.
I was controlling my laugh untill she said. "Don't cry, you can run bash in windows" rofl 🤣🤣🤣
It's a little scary how accurate this is
2020 and it's still a container inside a container :)
But where will be keep these containers?
@@publicalias8172 someone is probably running them in aws lambda
ahh god, I laughed so hard I bit my tongue. this is now a required video for all devs who want to swap our servers into docker-land.
And after 7 years....😂
These dockerized environments become very funny when someone asks how to backup & restore them. A large company (s**m*ns) actually came up with the "brilliant" Idea to run them on a Vmware VM and make veeam backups. :D
this was hilarious! well done whoever made this :-D
"use openstack for all i care" hahahahaha. Best ending. LMAO
.
OMG! The timing of each point is sooooo SYNCHED! Understanding the tech talk makes me appreciate the splicing of his rant vs subtitle! hahahaha! BRAVO!
.
I have to agree with Hilter on that.
(And this, ladies and gentlemen, is how you get into trouble if some douche quotes you out of context 😅)
Til im hitler
issuing correction on a previous post of mine, regarding the terror group ISIL. you do not, under any circumstances, "gotta hand it to them'
"You use a VM just to run Docker on your laptop" lmao
Holy shit how did i miss this seven years ago? I'm so glad the docker hype is over (not glad it's become a standard tool though). And glad i dont currently need to deal with it.
I actually introduced a company i worked for docker around the time of this video. I was pretty adament that everyone used it, but ONLY to create reproducible dev environments. It saved us a lot of time and headaches, prior to it we were copying over mountains of php scripts and database backups then assembling our local environments by hand. Countless examples of "works on my machine" bugs. It was a small company, we used a staging server and production server. Pull changes from git on staging, run tests, push to production. Docker would've only introduced new problems and time cost.
These days I'm all about Nix for the "reproducible" part. Linux containers are still useful too but don't ever think they are virtual machines!!! I realized docker was bloat when i wrote scripts to set it up, then realized my scripts added a new layer of bloat, decided to automate the OS actions docker did instead, then realized the only part of it I wanted was the linux containers that you dont need docker to use!!!
Ah, a fellow nixos user. I've been pushing for nix + zfs rack servers at work, but I'm already happy to have podman to escape the jail of the old RHEL VMs that we don't have sudo on.
I'm still annoyed that we basically pay 10x overhead for VMs to run things on someone elses machine for "scalability", when ZFS for vertical upgrades & nixops for horizontal scaling would solve basically every scalability issue we would have.
I don't understand how the scripts add bloat. Like interim build containers or what?
I'm always wondering why the hell do I need a full OS docker image if 1) containers are not VMs, and 2) my program only has a small dependency :/
@@Levelworm well you don't, people usually run something like Linux Alpine in prod (which is a very very bare bones distro of Linux). They usually only use full blown OS's in containers if they also build in containers.
Good point@@peterbonnema8913
The "You might as well use `curl | sudo bash`" took me out 😂
I took the nodejs hipster personally
As a Software Engineer who just knows how to write docker files, github workflows and how to set up virtual machine. I think i need to learn more to understand this video.
Oh wait this is 7 years ago... damn aged so well
"Don't cry, you can run bash on Windows 10 now".
Holy shit this is too much.
2:06 if you break your leg, it's hard to cook orangutan
I’d like to see hitler’s reaction to someone suggesting kubernetes as a solution
As a German it is actually rather difficult to ignore the spoken text. But it is hilarious to actually be able to see a Hitler parody without a VPN, because ironically many historical youtube videos about Hitler - even parodies - are censored in German youtube, unless they are mainstream TV productions. It really makes you wonder who is in power now. xD
This might be the best thing I have seen on youtube
I haven't laughed this hard in a long time, well done.
This is some of the best humor I've ever seen.
shit Docker was relatively new back when this was posted, and this still holds up somewhat, even with K8S orchestration. Microservices are hard to implement really well.
I know nothing of software, yet I learned a little because I'm so familiar with this meme. 😂
A CONTAINER INSIDE A CONTAINER
“Who the hell uses public containers from Docker hub?”
*camera pans to everyone*
Lmao! Subtle, but great
Absolute genius. I laughed till I cried. THANK YOU.
I would like to see that kind of passion in architecture discussions.
Hitler did always want to be an architect.
Ok, ok, hear me out:
DockerOS: a Docker shell on top of the Linux kernel.
Whoever made this is a legend
“I’m moving everyone to Windows!” Cue crying 😂
Don’t worry, you can use bash on windows now 🤣
Every spoken argument hold hard learned lessons from from failures and experience. Funny but they are valuable insights. But, "Everybody thinks they're Google!" sums up the whole.
I cannot believe that I learned a few things about containers from... HITLER!
"If you never used Docker in production, leave the room now" and almost everyone leaves... Yup! Devs being devs. Love it.
Best Docker Tutorial ever !
This is the best version of this meme I’ve ever seen
2:06 "If You break your legs, it's hard to cook orangutan"
I'm so happy I'm leaving IT industry. Before it was something humanity can be proud of, now it is just miserable, pathetic slavery 😅
Congrats on getting out
Am trying myself to get out as well
what kind of career/job are you changing to if i may ask? Someday I want to leave too, but it's kinda hard imagining doing anything else outside of programming..
I can kind of relate. First (and only) time I used docker, I nearly went insane.
"I'm moving everyone to windows"
2023 youtube recco at end: Learn Docker in 7 easy goose-steps.
It's funny because Open Source Software shares an acronym with the Office of Strategic Studies.
still valid in 2k23
"It's okay, you can run Bash on Windows 10 now" I fucking died lmao
Thank you, RUclips, for reviving this video.
1:45 "Why do we need a docker if we're running a VM?"
I absolutely hate to say it, but "angry man with little mustache" had a point. Docker sucks. What can they do a VM can't by itself? Just more layers of complexity and things to break.
that is THA best parody ever! should've won an Oscar! I can't stop laughing 🤣
2023 and it’s still relevant
so true, 8 years ago
all problems have been solved if not use public containers