Hacker News Reader

Comment by mr__y | Hacker News Reader

This could also be solved by one person running a service that would crawl all public docker images and pull those that are close to expiration automatically every 6 months. At this moment I'm just curious how much resources would be needed for that

View on HN

If Docker cared enough to implement this policy, then why wouldn't they just modify it enough to delete images being protected in such a fashion?

If you just need to send the request, not read the content in full, that can be done by one free-tier cloud VM.

Which hosting provider and product provides such free-tier cloud VMs?

None of the big providers offer always-free VMs, but if you could just ping the registry endpoint, Lambda might be able to do it since you get 3.2 million seconds of compute "always free"[0]. Same for Google Cloud Run, although it's only 1GB egress a month[1], and Azure Functions[2].

0: https://aws.amazon.com/free/?all-free-tier.sort-by=item.addi...

1: https://cloud.google.com/free#always-free-products_5

2: https://azure.microsoft.com/en-us/free/free-account-faq/

Google Cloud offers 1 free always-on f1-micro VM.

Reading the content still should not be a problem, since ingress is free for almost all cloud providers.

> ingress is free for almost all cloud providers.

that would still pose a problem, not cost-wise, but you'd still need to download image after image. Will a single instance be capable of "downloading" all existing images every 6 months?

Reply on news.ycombinator.com