cpuguy83

39 ms·

511.
by cpuguy83 6y ago
The "hard part" is generating the diff layer itself, the rest is json manipulation: add the layer sha to the manifest and image config.
512.
by cpuguy83 6y ago
That's assuming you want to copy the the whole thing. And even if you do want to do that, this is what you do with copy_file_range as well, just that in many cases you can do it with a single call instead of multiple read/write ca
513.
by cpuguy83 6y ago
That's not true of those other languages. While the alternative implementations are always playing catch-up as it relates to language changes, the developers of those implementations do participate in the discussion around those change
514.
by cpuguy83 6y ago
Really makes you think about the real reasons RSS was killed basically overnight.
515.
by cpuguy83 6y ago
I don't think the op intended "storm" to be negative here. Just to say that there are loads of changes coming soon.
516.
by cpuguy83 6y ago
To be fair, much of runc is written in C as well. And go is really terrible specifically for the case of runc.
517.
by cpuguy83 6y ago
Just b/c someone internally may have brought it up doesn't mean it shouldn't be brought up externally. It also doesn't mean the powers that be internally aren't doing a "can we get away with this" simply
518.
by cpuguy83 6y ago
Uuuuh, no. Raising safety concerns is important. And it is a safety concern. I had the same exact concern when I saw it just as I had safety concerns about hypothetically owning KITT growing up. It is a concern, it could cost lives, it shou
519.
by cpuguy83 6y ago
Yes. Vscode (server) is running on the remote machine. Extensions run on the remote as well. A new terminal in vscode is a terminal on the remote. Only the client GUI is local.
520.
by cpuguy83 6y ago
I use vscode to connect to a a cloud vm. VSCode is surprisingly good at this. Client is local and connects to an vscode server over ssh. Granted I work on Azure and the cost of the vm is not something I have to worry about.
521.
by cpuguy83 6y ago
Just watched that one a few days ago!
522.
by cpuguy83 6y ago
The ideals behind the Prime Directive were from Vulcan influence. The theory behind it is they tried to do exactly that and it led to disaster in every case.
523.
by cpuguy83 6y ago
You're in for a great ride! Enjoy!
524.
by cpuguy83 6y ago
It is how Heroku has operated since forever. Containers can be secure.
525.
by cpuguy83 6y ago
It would be Apple's obligation as a trademark holder to try and stop it, however. The word may be too generic, but the intent seems specifically to confuse.
526.
by cpuguy83 6y ago
Would love to know what resources you are speaking of here. We've definitely done some whack-a-mole with allocations in the engine, and of course there's always things getting changed/added still.
527.
by cpuguy83 6y ago
VM's offer different security. That is all. It is more secure to run a process with seccomp filters than it is to run it without. It is more secure to run a process with seccomp and vm isolation than just one or none of these.
528.
by cpuguy83 6y ago
Don't even need that on newer kernels and Docker 20.10: https://github.com/moby/moby/pull/41030
529.
by cpuguy83 6y ago
This is actually worse because the filesystem does not know about user namespaces.
530.
by cpuguy83 6y ago
I believe we setup containers in Docker 20.10 such that containers can bind to < 1024 by default without giving it cap_net_bind: https://github.com/moby/moby/pull/41030
531.
by cpuguy83 6y ago
This is exactly how the work. You either specify the user when creating the container (which can have certain implications, like being able to bind to < port 1024... solveable but still something to deal with) or you can for everything t
532.
by cpuguy83 6y ago
Indeed. I read this and instantly wanted to spend like 6 months learning the system, decisions/reasons into making whatever trade offs they make, etc. I think a key is keeping the amount of time to render a constant.
533.
by cpuguy83 6y ago
What are you doing that cruby is faster? I've run both Rubinius and jruby (with rails), both gave me significant performance gains.
534.
by cpuguy83 6y ago
What? Why would it prompt this? Docker supports SELinux.
535.
by cpuguy83 6y ago
Did you not read the goals of Ruby 3.0? (Hint, it's performance, specifically the goal was 3x increase over 2.0).
536.
by cpuguy83 6y ago
Except there is jitted Ruby. Rubinius and jruby to start. Even (C)Ruby 3.0 literally touts JIT as one of the pillars that make it 3x faster than 2.0, granted it is only optimized for a certain kind of code (not Rails) in 3.0.
537.
by cpuguy83 6y ago
Or jruby.
538.
by cpuguy83 6y ago
Sympathy has nothing to do with it.
539.
by cpuguy83 6y ago
The annoying thing is, most people would agree that the whole system sucks... until you start talking about politics and suddenly you'd think a bunch of people have a love affair with their insurance company and healthcare providers.
540.
by cpuguy83 6y ago
The sad thing is, as expensive as healthcare is they probably have to jack up those rates because they are getting screwed everywhere else. In the end, though, the consumer is always the one who ends up getting the ultimate screw... exactly

More ›