_yy

9 ms·

61.
by _yy 11y ago
Containers also have a massive attack surface in comparison with VMs. Modern KVM has a comparable density to containers (except for memory). I agree on the advantages on LXC though. Many hosting companies use it. Why fix it if it ain't
62.
by _yy 11y ago
Yes, time keeping is up to the host kernel. The time can't deviate in the container.
63.
by _yy 11y ago
Nice thing is - systemd works well for both.
64.
by _yy 11y ago
I explicitly did not mention Gentoo - I know a bunch of people who run it in production. But, for anyone considering to do this - if you're running Gentoo, you're essentially building your own distro, which has massive advantages
65.
by _yy 11y ago
As a sysadmin, I fully agree. I shudder at the thought of using Alpine Linux (or Arch Linux, or...) in production. The value that stable, long term support distros provide shouldn't be underestimated.
66.
by _yy 11y ago
In the US, maybe, but for sure not in Europe. We don't even have a word for "jaywalking" in Germany.
67.
by _yy 11y ago
No way out of this, really. Damned if you do and damned if you don't. At least they took the high road and admitted the backdoor right away.
68.
by _yy 11y ago
But the login backdoor?
69.
by _yy 11y ago
> On the one hand you have the traditional server/sysadmin thinking about uptime and stability. For sysadmins, boot times are getting increasingly more important. We're getting to the point where we can spin up a new VM in <
70.
by _yy 11y ago
Literally anything is better than init and the jumbled mess of shell scripts accompanying it, then. init (the process) != init (the system), but you're right about the terminology, of course.
71.
by _yy 11y ago
Full ACK. It makes so many things so much easier and, notably, much more resilient. Ever had to debug a broken init script? The ability to "simply edit init scripts so that it works" often results in nasty, broken hacks ending up
72.
by _yy 11y ago
> invent something monolithic that isn't better than what it replaced What. Even if you disagree with systemd, literally anything is better than init.
73.
by _yy 11y ago
You wish. Some orgs move slowly.
74.
by _yy 11y ago
We're closer than one might think: https://blog.pfsense.org/?p=1866
75.
by _yy 11y ago
Many Secure Boot implementations let you load your own keys. The "removing the owner from the equation" thing is not an issue with Secure Boot, but with particular manufacturers. > The better place for signed loader verificatio
76.
by _yy 11y ago
+1 from me. Excellent library
77.
by _yy 11y ago
It's not a good solution. https://www.imperialviolet.org/2015/01/17/notdane.html
78.
by _yy 11y ago
They probably manage DNS in a Git repository/using Puppet, so deploying may be quite literal. I see no issue with that.
79.
by _yy 11y ago
Do try evil-mode/spacemacs!
80.
by _yy 11y ago
It's the first todo list application I've encountered which can actually compete with a piece of paper.
81.
by _yy 11y ago
So far, I haven't encountered any undocumented or severe breakage when staying with the stable version. Of course, things are different if you pull from Git master, but that's to be expected...
82.
by _yy 11y ago
Just use org-mode like you would use a paper todo list, and then add the bells and whistles when you need them. No need to spend a week setting it up.
83.
by _yy 11y ago
Was frustrated by this, until I realized that I actually do not need my agenda on my phone. Still nice to have, but not a deal breaker. And Google Keep is fine for shopping lists.
84.
by _yy 11y ago
Doesn't have to be that complicated, though. I recommend starting with a simple workflow. As a former Vim user, I can recommend evil-mode and the SpaceMacs project: https://github.com/syl20bnr/spacemacs https:&#x
85.
by _yy 11y ago
He patched the IP stack, so the checksum should be correct.
86.
by _yy 11y ago
Still is clean and simple. I like the new syntax.
87.
by _yy 11y ago
Yes but there's an interesting discussion on LWN.
88.
by _yy 11y ago
What kind of CLI pager does that? Legitimately curios.
89.
by _yy 11y ago
HN anti-duplicate allows resubmit for URLs which weren't well received at the first attempt.
90.
by _yy 11y ago
Standalone works very well too. Can recommend.

More ›