acatton

37 ms·

181.
by acatton 5y ago
GP here, exactly. Also how does one manages these mutable states? And these volumes? Most of these hosts are managed with Ansible, which the Top-Poster was criticising so heavily as "an anti-pattern".
182.
by acatton 5y ago
In theory yes. In practice, no. While immutable assets (I imagine you mean container or VM images) are easy to audit, they don't solve all problems. How do you spin up a database and add database-users over time? Do you just just rebui
183.
by acatton 5y ago
While I agree with you, Perforce is not open-core at all, in fact, they're are fully closed-source[1] [1] https://en.wikipedia.org/wiki/Perforce#Helix_Core
184.
by acatton 5y ago
(Disclaimer: I work for a big company which makes a browser, an OS for smartphones and a search engine. This is my own opinion, and does not reflect my employer, and so on, and so on…) > Some days I wonder what would stop me writing my
185.
by acatton 5y ago
My issue with Nix is thatm like docker, it is a dumb CLI which communicate with a powerful daemon running as root. I don't understand the concept/motivation behind it, everything that nix does should be able to be done in userland
186.
by acatton 5y ago
> The `download` Attribute For The <a> Element This can also be done by the webserver with Content-Disposition. [1] But it's cool, I didn't know this could be done with HTML, it offers a lot of possibilities. [1] https:&
187.
The sad state of sysadmin in the age of containers (2015)(vitavonni.de)
15 points by acatton 5y ago|1 comments
188.
by acatton 5y ago
From https://btrfs.wiki.kernel.org/index.php/Main_Page "The Btrfs code base is stable" And https://btrfs.wiki.kernel.org/index.php/Status is exactly what I said in the GP. Besides quotas
189.
by acatton 5y ago
It's always been. I used it on my servers in "Raid 10" mode and on my daily driver for 3 years now. As long as you don't do BTRFS-level raid 5/6. (Just do lvm-level or md-raid-level raid 5/6) don't do many
190.
by acatton 5y ago
CockroachDB is not a fork of Postgres, it's a NewSQL database written from scratch, compatible with the PostgreSQL protocol, and aiming at being SQL compatible with Postgres. I think you were thinking about YugabyteDB which is a wrappe
191.
by acatton 5y ago
I have no opinion on Rittenhouse, but I watched his trial as a non-American for the show. It was mind-boggling, to me, the argument on the iPad zooming feature[1]. This was three people — with no technical knowledge at all — arguing about a
192.
by acatton 5y ago
> systemd-nspawn isn't a container. For example it doesn't manage resources such as CPU or IO. Again, the scope is way different and in this case there is a whole slew of things systemd-nspawn isn't going to manage for you
193.
by acatton 5y ago
Every company I worked at (before systemd was mainstream) was running most of their services under supervisord[1] which was started by initv. I'm not sure initv "worked okay". [1] http://supervisord.org/
194.
by acatton 5y ago
From your link https://www.freebsd.org/cgi/man.cgi?query=rcorder > The `REQUIRE' keyword is misleading: It does not describe which daemons have to be running before a script will be started. > It describes w
195.
by acatton 5y ago
> Security modules do exist, they're different from Linux. Are you sure you're not just expecting FreeBSD-as-Linux? You're right. My original message was wrong, I edited it, while keeping the original content. What I meant
196.
by acatton 5y ago
Funny enough, I decided to play with FreeBSD for personal projects in 2020. I gave up and I am reverting all my servers to Linux in 2022, for the opposite of the reasons mentioned in this article. * Lack of systemd. Managing services throug
197.
by acatton 5y ago
Congratulation on the launch! Quick question, does Gravitl plan to become a company donor to Wireguard in the near future[1]? I think it would be great if companies which, as is their right, profit from FLOSS, also give back to FLOSS, not j
198.
by acatton 5y ago
> Since we're talking about two different points in time that are nearly a decade apart, lets be clear about the context here. spiped didn't exist when that article was written (or if it did, it certainly wasn't mature). B
199.
by acatton 5y ago
spiped is not an exclusive or to key based auth. I advise to use spiped + key based authentication. spiped allows also for circumventing zero-day attacks on openssh.
200.
by acatton 5y ago
Top comment poster here, yes. I use spiped as a 256bit-combination port knocker. The goal is to protect against vulnerabilies in OpenSSH :)
201.
by acatton 5y ago
> I wouldn't say fail2ban is bad advice per se. The kind of companies running deployments that do auditing on iptables are going to be very different to the types of companies that benefit from dynamic rules created by services like
202.
by acatton 5y ago
Wireguard is also a good alternative. But you need to connect to a VPN every time you want to SSH. Here is my personal reasons why I use spiped: * spiped is transparent by using ProxyCommand[1]. This allow me to do "ssh host" and
203.
by acatton 5y ago
Even for 2013, this is not very good advice. fail2ban makes your iptables dynamic, which is a nightmare to audit. This is what I do in 2021: * Set up spiped[1] in front of SSH * Install and setup nftables[2]. * Lock down every service as mu
204.
by acatton 5y ago
That is true, but SQLite doesn't support functional indexing. This means that you cannot do CREATE INDEX idx_t_bar ON t(json_extract(data, '$.bar')); for fast lookups. But you can do CREATE INDEX idx_t_bar ON t
205.
by acatton 5y ago
I never said storing json in databases was wrong. I said storing json in *SQL* databases was an anti-pattern. https://en.wikipedia.org/wiki/First_normal_form
206.
by acatton 5y ago
Not GP, but PostgreSQL offers jsonb fields[1] Since PostgreSQL allows for functional indexes, you can query and index the data in a structured way. For example you have a table t with "id" and "data" where data is a json
207.
by acatton 5y ago
I love PostgreSQL, and would recommend it anytime. Even though jsonb is very powerful, in general if you store JSON in a SQL database you're very likely doing something wrong. (You're breaking first normal form) But if you really
208.
by acatton 5y ago
Interesting project. It might be worth noting that there is the project https://galene.org/ which aims at achieving the same goals as MiroTalk (self hosted, open source), but with a subset of features (no file sharing) and
209.
by acatton 5y ago
This is indeed a very good technique. 3 years ago I left the python community and decided to stop doing Python. All my previous positions are Python dev positions. The first line of my profile is "I am NOT interested in any Python job&
210.
by acatton 5y ago
You're presenting statistics in a biased way which fits your narrative. It's very common to hear "most of the illegal transactions are still in dollar". But that's a biased way to see it. If USD represents $100T of

More ›