new | show | ask | jobs Github

pbh101 3 days ago

This is probably an anti-feature in most contexts.

▲

akovaski 3 days ago | parent [-]

The ability to push a verified artifact is an anti-feature in most contexts? How so?

▲

pbh101 3 days ago | parent [-]

It is fine if you are just working by yourself on non-prod things and you’re happy with that.

But if you are working with others on things that matter, then you’ll find you want your images to have been published from a central, documented location, where it is verified what tests they passed, the version of the CI pipeline, the environment itself, and what revision they were built on. And the image will be tagged with this information, and your coworkers and you will know exactly where to look to get this info when needed.

This is incompatible with pushing an image from your local dev environment.

▲

matt_kantor 2 days ago | parent [-]

With that sort of setup you'd run `docker pussh` from your build server, not your local machine (really though you'd probably want a non-ephemeral registry, so wouldn't use unregistry at all).

Other than "it's convenient and my use case is low-stakes enough for me to not care", I can't think of any reason why one would want to build images on their production servers.

	▲	pbh101 2 days ago \| parent [-]
		Agreed.