Salta al contenuto principale


The Docker corporation deleting open source organizations from their free-of-charge service, the Docker Hub, is an example of the maxim "centralized systems are evil or vulnerable".

In this case, the vulnerability is relying on a centralized system's willingness to continue to provide a service for free. Building on top of that was always risky.

What other centralized systems are you relying on, ones that might go away at any point?

in reply to Lars Wirzenius

I've seen a bunch of "here is how you use GitHub registry instead", which only moves the problem forward.
Unknown parent

Lars Wirzenius
@withaveeay @sjvn On the other hand, Flathub isn't a for-profit corporation. That changes the equation somewhat in that it's less likely to be taken away on a whim by someone wanting to make more money fast. But, yes, it's a centralized system, and such, vulnerable.
in reply to Lars Wirzenius

I was always a bit wary of Docker Hub; it just seemed to wrap everything in business-speak. Nothing wrong with that in itself, I thought, but maybe a red flag? Well, as it turns out, maybe it was…

I feel the same way about NPM (Javascript). FWIW.

in reply to Lars Wirzenius

the solution is generally protocols supported by foundations with strong t&cs
in reply to Guy James

@guyjames I’d generalise this even further:
protocols > services
in reply to Lars Wirzenius

Docker Hub, GitHub, Google Docs - the list is (unfortunately) endless.

I do at least keep automated backups of things I rely on, but I can't control what third party vendors do.

in reply to Lars Wirzenius

- my ISP
- my VPS provider
- github (sure, I could use gitea, but see previous two points)
- Backblaze
in reply to Scott 🏴

@Scott @Lars Wirzenius if they died suddenly there would be some disruptions, but I've already changed ISP and VPS provider a few times with minimal pain for price / quality issues, I don't think it would be a problem to do so because they've become suddenly evil.

Admittedly, I don't have a lot of data on the VPSs, and I don't need to provide multiple 9s of uptime (but if I did, I would be paid enough for redundancy, I hope)

in reply to Elena ``of Valhalla''

@valhalla your point does make sense when it comes to b2 tho, I can just migrate to a different S3 provider.
in reply to Lars Wirzenius

Once upon a time there were using #bittorrent to distribute "bigger" files but I suspect that it won't be that useful in this case as images do change a little too often

Questo sito utilizza cookie per riconosce gli utenti loggati e quelli che tornano a visitare. Proseguendo la navigazione su questo sito, accetti l'utilizzo di questi cookie.

⇧