docker – Page 3 – Türker Yıldırım

A rolling update in twenty lines of shell

NoteJanuary 23, 20251 min read

Compose has no rolling update, and the thing it does not have is twenty lines of shell for a two-replica service. Scaling up, waiting for health, then removing…

The image that was 40 MB smaller after one COPY was moved

NoteMay 28, 20241 min read

A COPY . . before the dependency install, which had been putting the entire source tree into a layer that the vendor directory then sat on top of.…

A build secret that was in the image, in a layer, in the history

NoteMay 21, 20242 min read

A token passed as a build argument, removed in a later layer, and present in the image history for anybody who pulls it. A secret mount is available…

Handing over on-call to one other person

Deep diveMay 8, 202410 min read

One person who can fix anything, and a rota of one. Three years of incidents resolved by the same person, every time.

A multi-platform build for one arm64 laptop

NoteApril 30, 20242 min read

One person on an arm64 machine, and an image built for amd64 running under emulation at a third of the speed. Emulated cross-building is correct and slow enough…

A licence change, and the fork we did not take

Deep diveApril 23, 202410 min read

20 March, a licence change, and a fork announced within a week. A dependency that is no longer open source, in production, everywhere.

MySQL 8.4, and the defaults that changed underneath us

Deep diveApril 10, 202410 min read

The first long-term-support release under the new model, and an application that could not authenticate after a container image bump.

The registry we ran ourselves for three weeks

Deep diveMarch 27, 202410 min read

A rate limit hit at 09:00 every weekday, a pipeline failing intermittently for two months, and the wrong one of three options tried first.

Pulling through a cache instead of authenticating

NoteMarch 19, 20242 min read

A registry rate limit hit every weekday at nine, and three options of which the cheapest was not the one we tried first. A mirror is transparent —…

Docker 25, and the build cache backend I finally read about

NoteFebruary 23, 20241 min read

Cache mounts are local to the builder, which on a hosted CI runner means they do nothing at all. A registry cache backend moves the layer cache off…