Docker

“It turns out, like, when you start a Docker container, like, first of all, like, most Docker images are, like, several gigabytes, and, like, 99% of that is never going to be consumed.”

“Dockerfiles are hard enough for software developers to write. I'm saying this with love as somebody who works on Docker and, like, works on Dockerfiles but it's really hard to use, and you need to know a bunch about Linux, basically, because you're running a b…”

“I think the magic of Docker is not really in the software. It's just like the standard that people have agreed on, like, here are a bunch of keys for a JSON document, basically. And you know, that was the magic of, like, the metaphor of real containerization a…”

“It would have taken me. You know, several hours to figure out some things that take 10 minutes if you could just ask exactly the question you want the answer to.”

“I spin up a Docker container. I run the con whatever the model told me the output to do is. I feed the output back into the model. I repeat this many rounds, and I check at the very end, you know, does the git commit history show that it is correctly cherry pi…”

“These Docker two awesome things will give you an image that's like, oh, 60 to a hundred meg, you know, maybe more, you know. And our OS, you know, kind of clocks in, I think we're in like a, maybe, maybe a megabyte or less or something like that.”

“Ideally, the thing that we want is to always run code in a Docker container, and then it has freedom and you can kind of snapshot, you know, with other kind of tools later on top, you can snapshot, rewind, do all this stuff. Unfortunately, working with a Docke…”

“At some point Docker basically stopped innovating and I left and the ecosystem continued around containers, but it didn't actually Pick up where we left off. Everything towards applying container tech to development kind of stopped.”

“Docker file was something we designed as a stopgap prototype. Thinking, oh, we'll clean this up later in, in 2013. You know, it's been more than 10 years. Compose was a clone of a clone that we acquired into the team and, like, stitched on top, and then as soo…”

“Docker itself isn't a security boundary. You don't want to be relying on that”

“Behind the scenes, we've actually launched a persistent Linux Docker container for you and attached it to a unique URL for you. And so you actually now have your own computer. It's basically a VPS that you're now running this in. And so you can install softwar…”

“Most of the tooling right now is kind of like stacked up, like you're stacking entropy on top of entropy on top of entropy, right? So you have like Docker and cube and then like Ansible scripts and all of these other things, right?”

“Docker containers, not really a true security boundary for one. But the other is like, if you are running real applications, a lot of times those applications use Docker and then you have to think about Docker and Docker, which is like really weird. And so I t…”