July 2020 Summaries

The text discusses various isolation techniques used in workload security, including chroot, privilege separation, prelapsarian containers, incarceration, language runtimes, emulation, lightweight virtualization, and Firecracker. It highlights the pros and cons of each technique and emphasizes that network exposure is a crucial factor to consider when implementing these methods. The author suggests that jails, unprivileged Docker containers, gVisor, and Firecracker are valid options for workload isolation, with the choice depending on specific requirements and constraints.

Dj Walker-Morgan introduces GoStatic, a small, self-contained web page server that can run in a bare Docker image without an OS layer. This makes it ideal for deploying static websites with minimal costs. The author demonstrates how to use GoStatic on Fly by creating a new project and replacing the example contents of the Dockerfile with two lines: FROM pierrezemb/gostatic and COPY index.html /srv/http/index.html. After deploying, users can access their site via https and custom domains. Additionally, the author suggests scaling down the VM size to micro-1x for cost efficiency.

Dj Walker-Morgan shares his experience of creating a website for a new community venture using Hugo, Caddy, and Fly. He begins by initializing the Fly deployment and then moves on to setting up the site with Hugo. Next, he uses Docker to build the site and Caddy as a web server. Finally, he configures the domain name and sets up TLS certificates for secure connections. The author emphasizes the importance of using the correct documentation version while working with Caddy.

Flyctl, a command-line tool for managing applications on the Fly platform, has released version 0.0.137 with significant changes to its command structure and functionality. The apps subcommand is being deprecated in favor of top-level commands for each app action. Additionally, new flags have been added to improve scripting capabilities, and there are updates to the init and info commands. Furthermore, a bug related to incoming HTTP/2 request cookies has been fixed, and the performance of the Optimizing Image phase of deployment has been improved.

Kurt Mackey discusses Fly.io, a platform that enables running API servers close to users for improved speed and performance. He mentions building an edge GraphQL server with Apollo and Redis, highlighting the benefits of static typing in GraphQL. The author also talks about using CDN-like infrastructure for GraphQL APIs and shares a guide on creating an Edge GraphQL service with Apollo. Additionally, he introduces Fly's demo GraphQL API based on the Open Library REST API and encourages readers to explore the source code.