Preventing Kubernetes from Pulling the Pause Image from the Internet

https://kyle.cascade.family/posts/preventing-kubernetes-from-pulling-the-pause-image-from-the-internet/

19•meatmanek•3h ago

Comments

cmckn•3h ago

It bugs me that this implementation detail of containerd has leaked to such an extent. This should be part of the containerd distribution, and should not be pulled at runtime.

Instead of just swapping out the registry, try baking it into your machine image.

fred_is_fred•3h ago

I've used k8s before a lot and at several companies. I am convinced that 99.9% of the people who use it should not be. But it's more fun than deploying VM images at least.

kachapopopow•1h ago

I use k3s for my home and for dev envs I think it's completely fine especially when it comes to deployment documentation.

I am way more comfortable managing a system that is k3s rather than something that is still using tmux that gets wiped every reboot.

Well... it's what I would have said until bitnami pulled the rug and pretty much ruined the entire ecosystem as now you don't have a way to pull something that you know is trusted with similar configuration and all from a single repository which makes deployments a pain in the ass.

However, on the plus side I've just been creating my own every time I need one with the help of claude using bitnami as reference and honestly it doesn't take that much more time and keeping them up to date is relatively easy as well with ci automations.

SlavikCA•1h ago

I'm running k3s at home on single node with local storage. Few blogs, forum, minIO.

Very easy, reliable.

Without k3s I would have use Docker, but k3s really adds important features: easier to manage network, more declarative configuration, bundled Traefik...

So, I'm convinced that quite a few people can happily and efficiently use k8s.

In the past I used other k8s distro (Harvester) which was much more complicated to use and fragile to maintain.

esseph•1h ago

Check out Talos Linux if you haven't already, it's pretty cool (if you want k8s).

nneonneo•2h ago

O/T, but I'm getting a cert error on this page - wonder if it's just me or if this site is just serving a weird cert. Looks like it's signed by some Fortinet appliance - maybe I'm getting MITMed? Would be kind of exciting/frightening if so.

EDIT: I loaded the page from a cloud box, and wow, I'm getting MITMed! Seems to only be for this site, wonder if it's some kind of sensitivity to the .family TLD.

gregoryl•26m ago

Ooft. If it helps, this is the PEM I'm getting. LetEncrypt signed.

nodesocket•1h ago

Nice to know, though I wonder how many companies are really using all private images? I've certainly had a client running their own Harbor instance, but almost all others pulled from Docker Hub or Github (ghcr.io).

redrove•40m ago

Pretty much all enterprises are using their own ECR/GCR/ACR.

Mr Tiff

Hypothesis: Property-Based Testing for Python

RISC-V takes first step toward international ISO/IEC standardization

This Day in 1988, the Morris worm infected 10% of the Internet within 24 hours

Apple’s Persona technology uses Gaussian splatting to create 3D facial scans

Bluetui – A TUI for managing Bluetooth on Linux

Asus Announces October Availability of ProArt Display 8K PA32KCX

Patching 68K Software – SimpleText

Direct File won't happen in 2026, IRS tells states

Pg_lake: Postgres with Iceberg and data lake access

Show HN: A CSS-Only Terrain Generator

By the Power of Grayscale

Vectorizing for Fun and Performance

Grayskull: A tiny computer vision library in C for embedded systems, etc.

GM Deprecating In-Car App Store for Models as Recent as 2020

Codemaps: Understand Code, Before You Vibe It

Uncle Sam wants to scan your iris and collect your DNA, citizen or not

What does computer literacy mean for 2026?

Whole Earth Index

Zohran Mamdani wins the New York mayoral race

Preventing Kubernetes from Pulling the Pause Image from the Internet

I took all my projects off the cloud, saving thousands of dollars

Inside an Isotemp OCXO107-10 Oven Controlled Crystal Oscillator

The Microsoft SoftCard for the Apple II: Getting two processors to share memory

Frozen String Literals: Past, Present, Future?

Google Removed 749M Anna's Archive URLs from Its Search Results

Launch HN: Plexe (YC X25) – Build production-grade ML models from prompts

Munich's surfers left stunned after famed river wave vanishes

Singing bus horns in West Sumatra

Epic vs. Google settlement: Opening up Android

Preventing Kubernetes from Pulling the Pause Image from the Internet

Comments

Mr Tiff

Hypothesis: Property-Based Testing for Python

RISC-V takes first step toward international ISO/IEC standardization

This Day in 1988, the Morris worm infected 10% of the Internet within 24 hours

Apple’s Persona technology uses Gaussian splatting to create 3D facial scans

Bluetui – A TUI for managing Bluetooth on Linux

Asus Announces October Availability of ProArt Display 8K PA32KCX

Patching 68K Software – SimpleText

Direct File won't happen in 2026, IRS tells states

Pg_lake: Postgres with Iceberg and data lake access

Show HN: A CSS-Only Terrain Generator

By the Power of Grayscale

Vectorizing for Fun and Performance

Grayskull: A tiny computer vision library in C for embedded systems, etc.

GM Deprecating In-Car App Store for Models as Recent as 2020

Codemaps: Understand Code, Before You Vibe It

Uncle Sam wants to scan your iris and collect your DNA, citizen or not

What does computer literacy mean for 2026?

Whole Earth Index

Zohran Mamdani wins the New York mayoral race

Preventing Kubernetes from Pulling the Pause Image from the Internet

I took all my projects off the cloud, saving thousands of dollars

Inside an Isotemp OCXO107-10 Oven Controlled Crystal Oscillator

The Microsoft SoftCard for the Apple II: Getting two processors to share memory

Frozen String Literals: Past, Present, Future?

Google Removed 749M Anna's Archive URLs from Its Search Results

Launch HN: Plexe (YC X25) – Build production-grade ML models from prompts

Munich's surfers left stunned after famed river wave vanishes

Singing bus horns in West Sumatra

Epic vs. Google settlement: Opening up Android