LukeShu

70 ms·

721.
by LukeShu 8y ago
libvirt-the-software is tens of thousands of lines of complex code that doesn't really add much. libvirt-the-project does contribute patches in to qemu, and a lot of the reason that libvirt-the-software doesn't add much of valu
722.
by LukeShu 8y ago
Note that this isn't a "major" change from v3.x.x; the major version is year-based (${year}-2015). This is v4.0.0 because it is the first release of 2019.
723.
by LukeShu 8y ago
Here's the best I could do at formatting and reading/commenting it, so far: ;; Usage: (get) ;; Parse the entirety of stdin as a sequence of s-expressions. Return ;; that list of expressions. ;; ;; The defini
724.
by LukeShu 8y ago
That's a good counterpoint. It would still have to live somewhere in the filesystem, and have a userspace program load it in to the kernel, just as `utsname.nodename` is loaded from /etc/hostname.
725.
by LukeShu 8y ago
See also: /proc/sys/kernel/random/boot_id /proc/sys/kernel/random/uuid ---- Because the machine-id is intended to be something that persists between reboots, it is necessarily s
726.
by LukeShu 8y ago
> These days I think that definition should be updated to "container" instead of "kernel": if you're running separate logical machines inside the same kernel with separate PIDs etc., they should have separate ma
727.
by LukeShu 8y ago
I state that by clearly stating the premise and assumptions in an if/then format: > If users trust the key because they trust updates coming from Daniel ..., then That's a big-ish "if"; I didn't weigh in on w
728.
by LukeShu 8y ago
He didn't destroy them out of malice. He destroyed them because (from his point of view) they were about to be compromised. If users trust the key because they trust updates coming from Daniel and if Daniel is about to lose control o
729.
by LukeShu 8y ago
James Donaldson (the CEO) effectively kicked Daniel Micay (the then-CTO) out. Daniel Micay destroyed the signing keys, so any existing users would need to re-format their phone to an image that accepts new signing keys in order to keep rece
730.
by LukeShu 8y ago
Thanks for introducing me to `checksec`!
731.
by LukeShu 8y ago
> As far as I can tell, rsc.io/sampler isn't a git repository, so it's not doing the same stuff `go get` does. If I try to clone it I just get hit by the HTTP redirect to the docs for rsc.io/sampler. Why would you t
732.
by LukeShu 8y ago
Do note that you can use errcheck with modules if you call it through golangci-lint.
733.
by LukeShu 8y ago
Just to add, since I didn't speak about the differences between (1) and (2) or (3) and (4): You have to use (4) if (and only if) you're going to use a resolvconf(8) implementation other than systemd-resolvconf. For example, I use
734.
by LukeShu 8y ago
It's a situation where you can't do the right thing in all places. Some programs, like statically linked Go programs, don't use the system APIs because they don't want to link against external libraries. So, if the syst
735.
by LukeShu 8y ago
There's a reason why Go 1.12 still doesn't set GO111MODULE=on by default. They're waiting until not so much tooling is broken on modules.
736.
by LukeShu 8y ago
No, you don't need to fork/replace everything in the chain. A `replace` in the top-level `go.mod` applies in all places where that package is used. Doing a fork/replace on everything in the chain will have no affect; `replac
737.
by LukeShu 8y ago
> I like the Debian solution to this, which permits freeform textual suffixes, so that in the hypothetical scenario above, you can release v1.2.3bigco1, v1.2.3bigco2, ... Go also allows freeform textual suffixes, it just needs a `+` in
738.
by LukeShu 8y ago
> What's the "current module", anyway? Where is that stored? The article uses "current module" like you might use "current git repository"; it's the module containing the directory that you are c
739.
by LukeShu 8y ago
1. I think you mean the "glibc" resolver, not the "glib" resolver (I do not believe that GLib contains a resolver). 2. systemd-resolved does not use glibc's resolver. It is true that systemd-resolved does not unders
740.
by LukeShu 8y ago
Since version 5 in 2011. For a while it was a monthly release, but since version 22/23 in June/August 2013 it's slowed down to every other month.
741.
by LukeShu 8y ago
It is restricted to what is in PATH. Among other things, it disallows "Setting or unsetting the values of the … PATH… variables.", and disallows "Specifying command names containing slashes." https://www.gnu.
742.
by LukeShu 8y ago
> but point I was driving at is the restrictions here at the application level and not at the system level. Your point is well-taken! I'm obviously not privy the the conversations you've had with potential customers, so I&#x2
743.
by LukeShu 8y ago
The article claims that things like Bash's restricted mode are ineffective. It gives the example: parent$ bash --restricted child$ cd .. bash: cd: restricted child$ pwd /home/rjones child$ bash
744.
by LukeShu 8y ago
OSI wasn't just a layering model--it was a protocol suite. The thing is, the OSI stack lost to the TCP/IP stack. That's why it seems tricky to figure out how the "real world" fits in to it--TCP/IP networks li
745.
by LukeShu 8y ago
SSH X11 forwarding won't have access to the GPU. It also tends to perform very poorly in all but fairly low-latency networks.
746.
by LukeShu 8y ago
I'm pretty happy with VNC with JPEG compression (which not all VNC implementations support). Depending on the use-case, I either use TigerVNC `vncserver` (creates a virtual X11 display, in my experience OpenGL performs very poorly),
747.
by LukeShu 8y ago
ssh -D doesn't do TCP over TCP, its performance issues are fore different reasons.
748.
by LukeShu 8y ago
Whenever someone says "most people don't write large Bash scripts", I have to chime in and say that I would consider most GNU/Linux distros to be giant piles of shell scripts. A year or two ago, Arch Linux migrated the t
749.
by LukeShu 8y ago
I see it with Firefox on Arch Linux. No matter the size of the window, the page seems to be a fixed ~16px wider.
750.
by LukeShu 8y ago
Wayland isn't refusing to support Nvidia for ideological reasons, they're refusing to support Nvidia for pragmatic reasons. It's not "ideologically, we'd like to be able to modify the Nvidia blob", it's &

More ›