From nobody Tue Feb 28 13:29:40 2023 X-Original-To: freebsd-virtualization@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PQys34kjKz3vSgY for ; Tue, 28 Feb 2023 13:29:43 +0000 (UTC) (envelope-from bounces+22773047-b8c4-freebsd-virtualization=freebsd.org@em7125.potemkin.co) Received: from pnkfpknw.outbound-mail.sendgrid.net (pnkfpknw.outbound-mail.sendgrid.net [50.31.49.41]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4PQys23Zmcz4CWJ for ; Tue, 28 Feb 2023 13:29:42 +0000 (UTC) (envelope-from bounces+22773047-b8c4-freebsd-virtualization=freebsd.org@em7125.potemkin.co) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=potemkin.co header.s=s1 header.b=rmf3Edj3; spf=pass (mx1.freebsd.org: domain of "bounces+22773047-b8c4-freebsd-virtualization=freebsd.org@em7125.potemkin.co" designates 50.31.49.41 as permitted sender) smtp.mailfrom="bounces+22773047-b8c4-freebsd-virtualization=freebsd.org@em7125.potemkin.co"; dmarc=pass (policy=reject) header.from=potemkin.co DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=potemkin.co; h=from:in-reply-to:references:subject:mime-version:to:cc:content-type: cc:content-type:from:subject:to; s=s1; bh=w4n87xY1qkGJih89cG0j9+qtVx6ZINcRGuQ+SWycHr0=; b=rmf3Edj3MkFSTMDIcdrgM3ZLJ7dvCNBCEdJMyAQcUobA3vICv0zUGQ5U2NZpeudZ5fjB U6N6Z0q5uQI4IEq3DExLcSuBO/77B1QkNkPrC3dl1/rnMfO7IPxcAKluWilugHexeyTpCk ls/GwZkbFXdteNe5xb0EC0pBDG61s2uO0PrP1aJZaYfOuP8FHT0BY26mMxUp48tXfXJIJ1 axLnRJc2jFWwvhvhOlhiBrVW17Eg56muSFgSntlwh3RsnutXv1JbYgMdhX2+guXHLW4XKJ thI8UeDQ0BWATbKLe5BUlh4yhZgJ3zxS+5Q6hBMQWmj0QjNTIP9JpcTu8oxZJLug== Received: by filterdrecv-59cb65cf6d-sfxbf with SMTP id filterdrecv-59cb65cf6d-sfxbf-1-63FE01C4-13 2023-02-28 13:29:40.426415968 +0000 UTC m=+176329.709452086 Received: from my.potemkin.co (unknown) by geopod-ismtpd-2 (SG) with ESMTP id 3lUh_vu9SzmKwSnRE7fHrw Tue, 28 Feb 2023 13:29:40.024 +0000 (UTC) Received: (Haraka outbound); Tue, 28 Feb 2023 13:29:39 +0000 Received: from Homack.local ([104.28.229.190]) by my.potemkin.co (Haraka/2.8.28) with ESMTPSA id FC88D5BB-06D9-4AB9-B68B-90BEE9F4BBC3.1 envelope-from tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (authenticated bits=0); Tue, 28 Feb 2023 13:29:39 +0000 Date: Tue, 28 Feb 2023 13:29:40 +0000 (UTC) From: "alex@potemkin.co" Message-ID: <5a98caec-b9aa-4179-ad35-11b375d96e26@edison.tech> In-Reply-To: <20230220202442.GN95670@funkthat.com> References: <20230220202442.GN95670@funkthat.com> Subject: Re: Actual status of Docker (ready for production?) List-Id: Discussion List-Archive: https://lists.freebsd.org/archives/freebsd-virtualization List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-virtualization@freebsd.org X-BeenThere: freebsd-virtualization@freebsd.org MIME-Version: 1.0 X-SG-EID: =?us-ascii?Q?qI+I72nsxr9uFgKupIWE7ea2Iz6Lg4g5c6vrw4IYmWV0BtfPlRKVoWYnL4Uj1R?= =?us-ascii?Q?QXi5dAKiFxlw=2F0eJyI2F0xfxtGCHYwMIeXikh0B?= =?us-ascii?Q?h8I9OkCpArb+wWRMoYfdXLX1GOFy3CtKsfwPlDb?= =?us-ascii?Q?2TNdXm2Pm2XDuYpMxj2chaoToITmw6hBWq5jmcx?= =?us-ascii?Q?+I35yzQ2htB9EkjeBnDV2WlItMz+6SguH4Ytvfg?= =?us-ascii?Q?RFD7fV+Vnp8+RCnjM1a4Cp2ZEN1MjNlLl2KMuMq?= =?us-ascii?Q?Lah9zQSqpIscsW94wxcLA=3D=3D?= To: John-Mark Gurney , "decke@bluelife.at" , "marietto2008@gmail.com" , "pprocacci@gmail.com" , "joneum@freebsd.org" Cc: "freebsd-virtualization@FreeBSD.org" X-Entity-ID: tFn0ONcU0Zp0/w+lH/ofsA== Content-Type: multipart/alternative; boundary="63fe01c0_6b8b4567_176e" X-Spamd-Result: default: False [-2.70 / 15.00]; FROM_DN_EQ_ADDR(1.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[potemkin.co,reject]; FORGED_SENDER(0.30)[alex@potemkin.co,bounces@em7125.potemkin.co]; R_DKIM_ALLOW(-0.20)[potemkin.co:s=s1]; R_SPF_ALLOW(-0.20)[+ip4:50.31.32.0/19:c]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; SUBJECT_HAS_QUESTION(0.00)[]; ARC_NA(0.00)[]; TO_DN_EQ_ADDR_SOME(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TAGGED_FROM(0.00)[22773047-b8c4-freebsd-virtualization=freebsd.org]; FROM_NEQ_ENVFROM(0.00)[alex@potemkin.co,bounces@em7125.potemkin.co]; RCVD_TLS_LAST(0.00)[]; MLMMJ_DEST(0.00)[freebsd-virtualization@freebsd.org]; RCPT_COUNT_FIVE(0.00)[6]; TO_DN_SOME(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; ASN(0.00)[asn:11377, ipnet:50.31.48.0/20, country:US]; RCVD_COUNT_THREE(0.00)[4]; FREEMAIL_TO(0.00)[funkthat.com,bluelife.at,gmail.com,freebsd.org]; DKIM_TRACE(0.00)[potemkin.co:+]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RWL_MAILSPIKE_POSSIBLE(0.00)[50.31.49.41:from] X-Rspamd-Queue-Id: 4PQys23Zmcz4CWJ X-Spamd-Bar: -- X-ThisMailContainsUnwantedMimeParts: N --63fe01c0_6b8b4567_176e Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =20 Dear John, Bernhard, Mario, Paul, Jochen, =20 =E2=80=8B =20 =E2=80=8Bthank you very much! =E2=80=8BI very much appreciate your detailed= and prompt responses! =20 =20 =E2=80=8B=E2=80=8B=E2=80=8BApologies for the delay in getting back to you -= I was getting into the materials you generously provided and considering t= he options, but at the end it seems that it's best to use Linux for the cas= es when use of unmodified Docker containers from Dockerhub is required. =20 =E2=80=8B =20 With this said, let me wish you, @=E2=80=8BJochen, the best luck and to get= things implemented as soon as possible in the most convenient and elegant = way! =20 =E2=80=8B =20 =20 =20 =20 =20 With best regards, =20 =E2=80=8BAlex Potemkin. =20 =20 =20 =20 =20 On Feb 20 2023, at 9:24 PM, John-Mark Gurney wrote: =20 > =20 > =20 > alex@potemkin.co wrote this message on Mon, Feb 20, 2023 at 08:13 +0000: > =20 > > ???I'm trying to understand an actual status of Docker / podman to che= ck if I can pick FreeBSD as a platform for the application servers running = pre-packaged apps inside Docker. > =20 > > =20 > =20 > > ??? > =20 > > =20 > =20 > > ???I've tried to google things, but I'm getting controversial informat= ion here: > =20 > > =20 > =20 > > ???- wiki (https://wiki.freebsd.org/Docker) says things doesn't actual= ly works since around 2019-2022 > =20 > > =20 > =20 > > ???- ports seems to contain Docker (https://www.freshports.org/sysutil= s/docker/) and it seems to be regularly updated > =20 > > =20 > =20 > > ???- there doesn't seem to be any discussion in this maillist lately, = which makes me thing it's either dead or very much alive =3D) > =20 > > =20 > =20 > > ??? > =20 > > =20 > =20 > > ???Any real-life Docker usage feedback would be much appreciated! > =20 > > =20 > =20 > > ???I'm considering production servers, would love to make it on FreeBS= D as opposed to Linux, but if it will be crashing / throwing errors and/or = won't just work out of the box, like it does on (Debian/Ubuntu) Linux, I wi= ll be in trouble. > =20 > =20 > Significant progress has been made in the last year or two. > =20 > =20 > I don't have any specific guides, but, runj network is working: > =20 > https://samuel.karp.dev/blog/2022/12/docker-style-networking-for-freebsd-= jails-with-runj/ > =20 > =20 > Also, podman is apparently working: > =20 > https://medium.com/@dfr/oci-containers-for-freebsd-512a6df2bc85 > =20 > =20 > which should get you what you need, ask podman is OCI compliant and > =20 > mostly compatible w/ docker, see: > =20 > https://soc.crashed.org/objects/2d51da12-7262-4576-bf53-0ea6a61d0da0 > =20 > =20 > The last message is on the dev version of FreeBSD, I'm not sure if it > =20 > will run on 13 if you need it to run on a RELEASE, but it likely should > =20 > work. > =20 > =20 > -- > =20 > John-Mark Gurney Voice: +1 415 225 5579 > =20 > =20 > "All that I will do, has been done, All that I have, has not." > =20 > =20 =20= --63fe01c0_6b8b4567_176e Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline
Dear John, Bernhard, Mario, Paul, Jochen,
=E2=80=8B
=E2=80=8Bthank you very= much! =E2=80=8BI very much appreciate your detailed and prompt responses!<= /font>

=E2=80=8B=E2=80= =8B=E2=80=8BApologies for the delay in getting back to you - I was getting = into the materials you generously provided and considering the options, but= at the end it seems that it's best to use Linux for the cases when use of = unmodified Docker containers from Dockerhub is required.
<= font style=3D"font-family:sans-serif">=E2=80=8B
With this said, let me wish you, @=E2=80=8BJoc= hen, the best luck and to get things implemented as soon as possible in the= most convenient and elegant way!
=E2=80=8B
With best r= egards,
=E2=80=8BAl= ex Potemkin.

On Feb 20 2023, at 9:24 PM, John-Ma= rk Gurney <jmg@funkthat.com> wrote:
alex@potemkin.co wrote this message on Mon, F= eb 20, 2023 at 08:13 +0000:
> ???I'm trying to understand an a= ctual status of Docker / podman to check if I can pick FreeBSD as a platfor= m for the application servers running pre-packaged apps inside Docker.
>  
> ???
>  
<= div>> ???I've tried to google things, but I'm getting controversial info= rmation here:
>  
> ???- wiki (https://= wiki.freebsd.org/Docker) says things doesn't actually works since around 20= 19-2022
>  
> ???- ports seems to conta= in Docker (https://www.freshports.org/sysutils/docker/) and it seems to be = regularly updated
>  
> ???- there does= n't seem to be any discussion in this maillist lately, which makes me thing= it's either dead or very much alive =3D)
>  
<= div>> ???
>  
> ???Any real-life Doc= ker usage feedback would be much appreciated!
>  
> ???I'm considering production servers, would love to make it o= n FreeBSD as opposed to Linux, but if it will be crashing / throwing errors= and/or won't just work out of the box, like it does on (Debian/Ubuntu) Lin= ux, I will be in trouble.

Significant progress has been made = in the last year or two.

I don't have any specific guides, bu= t, runj network is working:
https://samuel.karp.dev/blog/2022/12/= docker-style-networking-for-freebsd-jails-with-runj/

Also, po= dman is apparently working:
https://medium.com/@dfr/oci-container= s-for-freebsd-512a6df2bc85

which should get you what you need= , ask podman is OCI compliant and
mostly compatible w/ docker, se= e:
https://soc.crashed.org/objects/2d51da12-7262-4576-bf53-0ea6a6= 1d0da0

The last message is on the dev version of FreeBSD, I'm= not sure if it
will run on 13 if you need it to run on a RELEASE= , but it likely should
work.

--
  Jo= hn-Mark Gurney            &nbs= p;   Voice: +1 415 225 5579

    = ; "All that I will do, has been done, All that I have, has not."
 --63fe01c0_6b8b4567_176e--