fumikonyのブックマーク - はてなブックマーク

Sandboxing and Workload Isolation
Sandboxing and Workload Isolation Author Name Thomas Ptacek @tqbf @tqbf Workload isolation makes it harder for a vulnerability in one service to compromise every other part of the platform. It has a long history going back to 1990s qmail, and we generally agree that it’s a good, useful thing. Despite a plethora of isolation options, in the time I spent consulting for techno logy companies I learned
fumikony 2023/07/21
あとで読む
リンク
Rails on Docker
Rails on Docker Author Name Brad Gessler @bradgessler @bradgessler Image by Annie Ruygt Rails 7.1 is getting an official Dockerfile, which should make it easier to deploy Rails applications to production environments that support Docker. Think of it as a pre-configured Linux box that will work for most Rails applications. That means you’ll start seeing a Dockerfile in the project directory of a lo
fumikony 2023/01/29
あとで読む
リンク
API Tokens: A Tedious Survey
API Tokens: A Tedious Survey Author Name Thomas Ptacek @tqbf @tqbf Image by Annie Ruygt We’re Fly.io. This post isn’t about Fly.io, but you have to hear about us anyways, because my blog, my rules. Our users ship us Docker containers and we transmute them into Firecracker microvms, which we host on our own hardware around the world. With a working Dockerfile, getting up and running will take you l
fumikony 2021/08/27
あとで読む
リンク
Docker without Docker
Docker without Docker Author Name Thomas Ptacek @tqbf @tqbf Image by Annie Ruygt We’re Fly.io. We take container images and run them on our hardware around the world. It’s pretty neat, and you should check it out; with an already-working Docker container, you can be up and running on Fly in well under 10 minutes. Even though most of our users deliver software to us as Docker containers, we don’t u
fumikony 2021/04/10
あとで読む
リンク
1