Karl Isenberg

fwiw, I just put oinker in an alpine container. Since Alpine uses musl instead of glibc, I opted to compile in an alpine container too. https://github.com/karlkfi/oinker-go

I'm ok with flags as long as the docker image comes with a wrapper script to translate env vars to flags.

Sure, but having to run a shell has some serious drawbacks, namely signal handling, verbosity, and having to include a shell in the image in the first place. For the...

I'm not saying we **can't** put a shell in the image. I'm just saying that the current packaging doesn't. I'm pretty sure the reason it doesn't is to minimize image...

Personally, I like how mesos handles flags. I think it's great to have the flexibility to use flags if you want (great discoverability), or use a mix of env-vars and...

Does tinyproxy even get started? It seems like the startup script just installs it and doesn't configure or start it. https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/blob/master/examples/safer_cluster_iap_bastion/bastion.tf#L25

Hmm. I had to install and configure tiny proxy manually: ``` # SSH into the bastion-host VM gcloud beta compute ssh bastion-host --tunnel-through-iap --project ${PLATFORM_PROJECT_ID} --zone ${BASTION_ZONE} # Become root...

Ah, nevermind. installing tinyproxy with systemd DOES install a systemd service. It just doesn't configure it very well. ``` $ cat /lib/systemd/system/tinyproxy.service [Unit] Description=Tinyproxy lightweight HTTP Proxy After=network.target Documentation=man:tinyproxy(8) man:tinyproxy.conf(5)...

on-failure won't restart tinyproxy if it gets killed, but always will. Adding auto-restart can be done with: ``` sudo sed -i 's/^\[Service\]$/[Service]\nRestart=always/' /lib/systemd/system/tinyproxy.service sudo systemctl daemon-reload sudo systemctl restart tinyproxy...

There's probably some more work to do to start running the release-1.1 conformance tests against master, but it's just a matter of putting it in TeamCity.