Ask HN: How common is banning Docker?

3•martypitt•1h ago

I was doing some client work recently at a bank, where most of their engineering is offshored one of the big offshore companies.

The offshore team had to access everything via virtual desktops, and one of the restrictions was no virtualisation within the virtual desktop - so tooling like Docker was banned.

I was really surprsied to see modern JVM development going on, without access to things like TestContainers, LocalStack, or Docker at all.

To compound matters, they had a single shared dev env, (for cost reasons), so the team were constantly breaking each others stuff.

How common is this? Also, curious what kinds of workarounds people are using?

Comments

galaxy_gas•1h ago

If they run in one dev env, (for cost reasons), it is preferably in Docker is VERY expensive if you are not using it for personal, noncommercial usage now ...

VDI VM in VM often not ideal aswell,

Docker is paid per seat monthly subscription for commercial usages

martypitt•1h ago

The block was not for docker license cost reasons - it was part compliance, and part an issue with the underlying VDI VM they were using.

The onshore team were able to use Docker, but not offshore.

anovikov•1h ago

It is not common and as you could have figured from the rest of this arrangement, it's just yes, this organisation is broken. Which is usually a good thing, broken places are usually to make money off that's why they remain broken for a long time - some places might go under because of that, but not a bank.

Bender•1h ago

I was doing some client work recently at a bank

Having worked for a bank I will add my jaded opinion. Throw logic out of the window. Banks have their own regulations, history and internal policies. Finding a job is hard right now so one may have to grin and just accept it. Don't think too much about it.

Ask them if you can use VMWare or VirtualBox in the virtual desktop and get a VMWare license assigned to you. It's clunky but something they might actually have and may save some headaches. If this is an option ask them which Linux ISO is permitted and where it is.

How common is this?

Very common for a bank especially for offshore or remote employees.

Also, curious what kinds of workarounds people are using?

Nobody outside of the bank will like this answer. Ask them what work around is permitted within the policy. If your questions are always without emotion and always centered around policy they may grow to like you and with time you may earn more trust than others making your job just a little easier.

martypitt•1h ago

Thanks!

I've finished up there now, so this is purely retrospective.

For them - the workaround (sadly) was -- a lack of testing.

I was really surprised that in a heavily regulated environment (this project faced off to a regulator) Integration testing (which has gotten really easy on the JVM thanks to stuff like TestContainers) just didn't exist.

That could be symptom of a broader lack of a test-driven culture though.

A Month of Chat-Oriented Programming

Beep-8: A 4 MHz ARM v4a fantasy console with C/C++ SDK and WebGL emulation

Hideout

Free, short, hands-on Python Course for Beginners

U.S. Congress considers ban on Chinese collaborations

Mastermind of Mass Murder (2012)

America's Baristas Are Brewing Up a Labor Movement

A Monster Misunderstood; Himmler. The Evil Genius of the Third Reich (1953)

Show HN: Generate Images in Claude.ai

Ask HN: What's a good app for recording YouTube tech videos?

Why the Coal Addiction Won't End Anytime Soon

Dial-Up Internet Dittytoy

I think nobody wants AI in Firefox, Mozilla

Show HN: ByteSync – Open-source hybrid file sync (LAN and remote, E2EE)

Europe's IT spend to surge 11% as cloud sovereignty fever takes hold

US spy satellites built by SpaceX send signals in the "wrong direction"

Researchers question Anthropic claim that AI-assisted attack was 90% autonomous

Browserino is a tiny browser selector for macOS written in SwiftUI

Investigating dual-use technology and the darker side of innovation

Show HN: I built Beatdelay.co because I kept procrastinating on urgent tasks

Show HN: Teller – Automation should go unnoticed

The new Pebble app is live

Kryptos' final code remains unsolved. The creator is auctioning the solution

Tessel – A Tile Game

Linus Torvalds, in Conversation with Dirk Hohndel [video]

What Is RTMP Streaming Protocol and How Does It Work?

Keynote: Rust in the Linux Kernel, Why? – Greg Kroah-Hartman [video]

Show HN: Neo4j SDK with minimal cognitive load for an LLM

EnvTrace: Simulation-Based Semantic Evaluation of LLM Code

Show HN: Fun, Open-source Japanese learning Platform inspired by Monkeytype