Re: SSH access to CF app instances on Diego

James Bayer

thanks for sharing your view matt. i happen to disagree. i've talked to
many more conservative enterprise operations people and they really don't
want to enable snowflakes by default.

since we plan to have both global and per-space/per-app configuration
options, administrators can make the choice for each installation if they
want to enable writable containers without tainted container recycling.
each vendor that distributes cloud foundry could have their own opinionated

i'd love to hear from others in the oss community what the default should
be in cf-release. i can tell you that the vast majority of customers and
people i've spoken with feel it should be "recycle tainted containers by
default" and only able to be turned off with an exception to the rule from
an administrator.

On Thu, Jun 25, 2015 at 9:29 PM, Matthew Sykes <matthew.sykes(a)>

My concern is the default behavior.

When I first prototyped this support in February, I never expected that
merely accessing a container would cause it to be terminated. As we can see
from Jan's response, it's completely unexpected; many others have the same

I do not believe that this behavior should be part of the default
configuration and I do believe the control needs to be at the space level.
I have have already expressed this opinion during Diego retros and at the
runtime PMC meeting.

I honestly believe that if we were talking about applying this behavior to
`bosh ssh` and `bosh scp`, few would even consider running in a 'kill on
taint mode' because of how useful it is. We should learn from that.

If this behavior becomes the default, I think our platform will be seen as
moving from opinionated to parochial. That would be unfortunate.

On Thu, Jun 25, 2015 at 6:05 PM, James Bayer <jbayer(a)> wrote:

you can turn the "restart tainted containers" feature off with
configuration if you are authorized to do so. then using scp to write files
into a container would be persisted for the lifetime of the container even
after the ssh session ends.

On Thu, Jun 25, 2015 at 5:50 PM, Jan Dubois <jand(a)> wrote:

On Thu, Jun 25, 2015 at 5:36 PM, Eric Malm <emalm(a)> wrote:
after executing a command, concluding an
interactive session, or copying a file into an instance, that instance
be restarted.
What is the purpose of being able to copy a file into an instance if
the instance is restarted as soon as the file has been received?

cf-dev mailing list

Thank you,

James Bayer

cf-dev mailing list

Matthew Sykes

cf-dev mailing list

Thank you,

James Bayer

Join { to automatically receive all group messages.