Ask HN: How common is banning Docker?

8•martypitt•5h ago

I was doing some client work recently at a bank, where most of their engineering is offshored one of the big offshore companies.

The offshore team had to access everything via virtual desktops, and one of the restrictions was no virtualisation within the virtual desktop - so tooling like Docker was banned.

I was really surprsied to see modern JVM development going on, without access to things like TestContainers, LocalStack, or Docker at all.

To compound matters, they had a single shared dev env, (for cost reasons), so the team were constantly breaking each others stuff.

How common is this? Also, curious what kinds of workarounds people are using?

Comments

galaxy_gas•5h ago

If they run in one dev env, (for cost reasons), it is preferably in Docker is VERY expensive if you are not using it for personal, noncommercial usage now ...

VDI VM in VM often not ideal aswell,

Docker is paid per seat monthly subscription for commercial usages

martypitt•4h ago

The block was not for docker license cost reasons - it was part compliance, and part an issue with the underlying VDI VM they were using.

The onshore team were able to use Docker, but not offshore.

anovikov•4h ago

It is not common and as you could have figured from the rest of this arrangement, it's just yes, this organisation is broken. Which is usually a good thing, broken places are usually to make money off that's why they remain broken for a long time - some places might go under because of that, but not a bank.

7bit•1h ago

Banning docker equals to broken company to you? Please, have your opinion, but dont run around spreading absurd claims...

Bender•4h ago

I was doing some client work recently at a bank

Having worked for a bank I will add my jaded opinion. Throw logic out of the window. Banks have their own regulations, history and internal policies. Finding a job is hard right now so one may have to grin and just accept it. Don't think too much about it.

Ask them if you can use VMWare or VirtualBox in the virtual desktop and get a VMWare license assigned to you. It's clunky but something they might actually have and may save some headaches. If this is an option ask them which Linux ISO is permitted and where it is.

How common is this?

Very common for a bank especially for offshore or remote employees.

Also, curious what kinds of workarounds people are using?

Nobody outside of the bank will like this answer. Ask them what work around is permitted within the policy. If your questions are always without emotion and always centered around policy they may grow to like you and with time you may earn more trust than others making your job just a little easier.

martypitt•4h ago

Thanks!

I've finished up there now, so this is purely retrospective.

For them - the workaround (sadly) was -- a lack of testing.

I was really surprised that in a heavily regulated environment (this project faced off to a regulator) Integration testing (which has gotten really easy on the JVM thanks to stuff like TestContainers) just didn't exist.

That could be symptom of a broader lack of a test-driven culture though.

apothegm•3h ago

It might just be an unintentional side effect of an older rule. They don’t want people running full-on nested VMs probably due to security concerns (inability to properly lock down the nested VMs). They wrote that rule in, say, 2005, and haven’t revisited it since the emergence of containerization as a best practice. Possibly because like most banks their software practices lag by decades.

scaredreally•3h ago

Every environment is a copy of the data, I would imagine. I think you would want to limit spawning of copies of your data in an offshore outsourced environment for security reasons. That's my guess.

antonymoose•3h ago

Having worked in HFT, we had contractual obligations imposed on us by our customers for this very reason. In our case it wasn’t the data but rather the source code that we sold on to a few large banks that they were concerned for.

jakepage91•2h ago

Just out of curiosity, what does the dev env look like? A set of VMs? K8s? If k8s, then mirrord for teams can be useful for testing code locally against the dev env dependencies without having to containerize while also not breaking the shared env dependencies for others.

Disclaimer: I work for the parent company

Ask HN: What's your solution to tech addiction?

Ask HN: Is Computer Science still a good choice?

Ask HN: What Are You Working On? (Nov 2025)

Ask HN: How common is banning Docker?

Ask HN: How to learn concurrency?

Ask HN: Looking for a good course to learn proof assistant Lean 4

Ask HN: What metrics do you track in a Conversational Agent?

Starting Debugging Session from CLI

Ask HN: How does one stay motivated to grind through LeetCode?

Ask HN: Could Microsoft replace its CEO with ChatGPT?

Ask HN: How would you set up a child’s first Linux computer?

Ask HN: Senior people, how did your career evolve?

Ask HN: What do you do while LLM is writing code

Tell HN: PSA/reminder AI Apps have access to your clipboard

Tell HN: X is opening any tweet link in a webview whether you press it or not

Ask HN: What open source LLM agent do you guys use and why?

Ask HN: My family business runs on a 1993-era text-based-UI (TUI). Anybody else?

Ask HN: Who is hiring? (November 2025)

Ask HN: How do you get over the fear of sharing code?

Ask HN: Effective way to deal with mosquitoes?

The PUMP.NETWORK experiment: using gambling to calculate trust

Ask HN: Who wants to be hired? (November 2025)

Ask HN: How common is banning Docker?

Comments

Ask HN: What's your solution to tech addiction?

Ask HN: Is Computer Science still a good choice?

Ask HN: What Are You Working On? (Nov 2025)

Ask HN: How common is banning Docker?

Ask HN: How to learn concurrency?

Ask HN: Looking for a good course to learn proof assistant Lean 4

Ask HN: What metrics do you track in a Conversational Agent?

Starting Debugging Session from CLI

Ask HN: How does one stay motivated to grind through LeetCode?

Ask HN: Could Microsoft replace its CEO with ChatGPT?

Ask HN: How would you set up a child’s first Linux computer?

Ask HN: Senior people, how did your career evolve?

Ask HN: What do you do while LLM is writing code

Tell HN: PSA/reminder AI Apps have access to your clipboard

Tell HN: X is opening any tweet link in a webview whether you press it or not

Ask HN: What open source LLM agent do you guys use and why?

Ask HN: My family business runs on a 1993-era text-based-UI (TUI). Anybody else?

Ask HN: Who is hiring? (November 2025)

Ask HN: How do you get over the fear of sharing code?

Ask HN: Effective way to deal with mosquitoes?

The PUMP.NETWORK experiment: using gambling to calculate trust

Ask HN: Who wants to be hired? (November 2025)