11/45: reppar: Mention approaches based on VMs and Docker.

[Ludovic Courtès]

civodul pushed a commit to branch master
in repository maintenance.

commit 63977a1b0a7e362ca0428bde4e7148aed9940346
Author: Ludovic Courtès <address@hidden>
Date:   Sat May 30 15:35:32 2015 +0200

    reppar: Mention approaches based on VMs and Docker.
---
 doc/reppar-2015/reppar.sbib          |   39 ++++++++++++++++++++++++++++++++++
 doc/reppar-2015/reproducible-hpc.skb |   14 +++++++++++-
 2 files changed, 52 insertions(+), 1 deletions(-)

diff --git a/doc/reppar-2015/reppar.sbib b/doc/reppar-2015/reppar.sbib
index 7fed42f..a75051f 100644
--- a/doc/reppar-2015/reppar.sbib
+++ b/doc/reppar-2015/reppar.sbib
@@ -49,6 +49,20 @@ Computational Science, ICCS")
   (number "0")
   (pages "637--647")
   (issn "1877-0509"))
+  
+(article vangorp2011:share
+  (url "http://dx.doi.org/10.1016/j.procs.2011.04.062";)
+  (title "SHARE: a web portal for creating and sharing executable
+  research papers")
+  (author "Pieter Van Gorp, Steffen Mazanek")
+  (journal "Procedia Computer Science")
+  (note "Proceedings of the International Conference on
+Computational Science, ICCS")
+  (year "2011")
+  (volume "4")
+  (number "0")
+  (pages "589--597")
+  (issn "1877-0509"))
 
 (misc debian-reproducible-web
   (year "2015")
@@ -97,3 +111,28 @@ Administration (LISA V)")
   (author (noabbrev "Google, Inc."))
   (title "Bazel Web Site")
   (url "http://bazel.io/";))
+
+(article jeanvoine2013:kadeploy3
+  (title "Kadeploy3: Efficient and Scalable Operating System Provisioning")
+  (author "Emmanuel Jeanvoine, Luc Sarzyniec, Lucas Nussbaum")
+  (journal "USENIX ;login:")
+  (volume "38")
+  (number "1")
+  (year "2013")
+  (pages "38--44")
+  (month "February")
+  (url "https://hal.inria.fr/hal-00710638/en";))
+
+(misc kniep2015:reproducibility
+  (author "Christian Kniep")
+  (title "Reproducability of CAE-computations through Immutable
+  Application Containers")
+  (url "http://doc.qnib.org/HPCAC2015.pdf";))
+
+(misc gummaraju2015:docker
+  (author "Jayanth Gummaraju, Tarun Desikan, Yoshio Turner")
+  (year "2015")
+  (month "May")
+  (title "Over 30% of Official Images in Docker Hub Contain High
+Priority Security Vulnerabilities")
+  (url "http://www.banyanops.com/blog/analyzing-docker-hub/";))
diff --git a/doc/reppar-2015/reproducible-hpc.skb 
b/doc/reppar-2015/reproducible-hpc.skb
index d21a351..3412169 100644
--- a/doc/reppar-2015/reproducible-hpc.skb
+++ b/doc/reppar-2015/reproducible-hpc.skb
@@ -595,6 +595,18 @@ machines to perform isolated builds.  Google's 
recently-unveiled Bazel
 build tool relies on container facilities provided by the kernel Linux,
 similar to the Nix/Guix daemon, and provides another DSL to describe
 build operations ,(ref :bib 'bazel-web).])
+      (p [At the other end of the spectrum, reproducibility can be
+achieved with more heavyweight approaches such as full operating system
+deployments ,(ref :bib 'jeanvoine2013:kadeploy3), virtual machine (VM)
+deployments ,(ref :bib 'vangorp2011:share), and full-system
+container-based deployments ,(ref :bib 'kniep2015:reproducibility).  In
+addition to being resource-hungry, these approaches is are coarse-grain
+and do not compose: if two different VM or Docker images provide useful
+features or packages, one essentially has to make a binary choice and
+cannot combine the features or packages they offer.  A side issue is
+security: it was recently reported that many official Docker images are
+plagued with serious unfixed security vulnerabilities ,(ref :bib
+'gummaraju2015:docker).])
       (p (emph [HPC package management.]) [ In the HPC community,
 efforts have focused primarily on the automation of software deployment
 and the ability for users to customize their build environment
@@ -648,7 +660,7 @@ Spack?])]))
    )
    
 ;; Local Variables:
-;; compile-command: "skribilo -t latex -o reproducible-hpc.tex 
reproducible-hpc.skb && pdflatex reproducible-hpc.tex"
+;; compile-command: "skribilo -t latex -o reproducible-hpc.tex 
reproducible-hpc.skb && rubber --pdf reproducible-hpc.tex"
 ;; ispell-local-dictionary: "american"
 ;; indent-tabs-mode: nil
 ;; End: