cpuguy83

4 ms·

31.
by cpuguy83 6mo ago
The problem is distros often remove older versions from the repo as soon as the new version is available. Granted there is an archive that you can pull from.
32.
by cpuguy83 6mo ago
Giving kids the worst machines money can buy paired with absolutely terrible "education" software which is little more than bubble sheets on a screen was obviously going to fail. The problem isn't that kids can't learn o
33.
by cpuguy83 7mo ago
Sorry having to use ctrl+shift for in a terminal is absolutely awful. macOS keyboard shortcuts are king.
34.
by cpuguy83 7mo ago
Yeah this is the assumption, even pre-OSX. I won't claim to know the majority of mac users, especially not since the large uptick in the 2010's... but it seems, in my experience, very much the norm to not maximize windows and I wo
35.
by cpuguy83 7mo ago
Debatable because you don't use it?
36.
by cpuguy83 7mo ago
Homebrew would like a word.
37.
by cpuguy83 7mo ago
You mean like https://wiki.nixos.org/wiki/NixOS_Containers ?
38.
by cpuguy83 7mo ago
This attack was not mitigated by hash pinning. The setup-trivy action installs the latest version of trivy unless you specify a version.
39.
by cpuguy83 7mo ago
Give https://github.com/project-dalec/dalec a look. It is more declarative. Has explicit abstractions for packages, caching, language level integrations, hermetic builds, source packages, system packages, and minimal c
40.
by cpuguy83 8mo ago
Buildkit has the same caching model. That's what I'm saying. It doesn't force you to give it digests like nix functions often do but you can (and should).
41.
by cpuguy83 8mo ago
No it doesn't. If the content of a url changes then the only way to have reproducibility is caching. You tell nix the content hash is some value and it looks up the value in the nix store. Note, it will match anything with that content
42.
by cpuguy83 8mo ago
Producing different outputs isn't dockerfile's fault. Dockerfile doesn't enforce reproducibility but reproducibility can be achieved with it. Nix isn't some magical thing that makes things reproducible either. nix is sim
43.
by cpuguy83 8mo ago
I don't agree that the code is cheap. It doesn't require a pipeline of people to be trained and that is huge, but it's not cheap. Tokens are expensive. We don't know what the actual cost is yet. We have startups, who are
44.
by cpuguy83 8mo ago
This used to be option exposed in settings.
45.
by cpuguy83 8mo ago
This just isn't true anymore (besides the green).
46.
by cpuguy83 8mo ago
Multiple reasons: 1. Firecracker is still a smaller more deliberate surface area 2. qemu didn't have a microvm type at the time. Firecracker was the impetus for it
47.
by cpuguy83 8mo ago
qemu has a microvm machine profile, also boots in ms. There are also tooling on Linux to do containers as microvm's, long before Apple containers were a thing.
48.
by cpuguy83 8mo ago
Or, and bear with me hear, there is a problem even if you aren't experiencing it. I've been using spotlight since it was introduced for... everything. In Tahoe it has been absolutely terrible. Unusable. Always indexing. Never
49.
by cpuguy83 8mo ago
Not seeing complaints doesn't mean they don't exist. Not to mention ui latency that is common in electron apps that is just a low-level constant annoyance.
50.
by cpuguy83 9mo ago
That does not exist in the US as far as I've seen. There's Amazon's "just walk out" stuff, which they just killed.
51.
by cpuguy83 9mo ago
I made no comment about RedHat's offerings. I don't feel like RedHat had to do anything to sell support contracts in this case, because that was already their business. All they had to do was say they'll include container sup
52.
by cpuguy83 9mo ago
Right, and Docker sold such products and from early on.
53.
by cpuguy83 9mo ago
It compiles fast, starts up fast, and doesn't have a ton of hoops to jump through (ie borrower/checker in rust).
54.
by cpuguy83 9mo ago
That's true, we didn't do much around it. Small startup with monetization problems and all.
55.
by cpuguy83 9mo ago
You'd have to point me to those PR's, I don't recall anything specifically around rootless. I recall a lot of things like a `--systemd` flag to `docker run`, and just general things that reduce container security to make syst
56.
by cpuguy83 9mo ago
I haven't personally used it, but containerd also has "nerdbox": http://github.com/containerd/nerdbox
57.
by cpuguy83 9mo ago
Docker can run rootless the same way podman does.
58.
by cpuguy83 9mo ago
Absolutely none of this is true. Docker had support contracts (Docker EE... and trying to remember, docker-cs before that naming pivot?). Corporate customers do not care about any of the things you mentioned. I mean, maybe some, but in ge
59.
by cpuguy83 9mo ago
It requires cap_bpf which is considered a high privileged capability. So yes, it requires root in the sense of what people mean by root.
60.
by cpuguy83 9mo ago
Definitely do not look at Kubernetes as a good example of go code and especially not how it handles deps (btw, it only relatively recently switched to go mods). Not to say it is a bad project. Not at all.

More ›