cpuguy83

43 ms·

601.
by cpuguy83 6y ago
Apple mentioned they are specifically "working with Docker to support 'these things' in coming months". Confirmed with some Docker folks they are working on "something". All very nondescript, but they said they
602.
by cpuguy83 6y ago
Maybe stop spying on people? EU be like you have to put up this banner to tell them you are spying... it super annoying and everyone hates it... and you be like "sure, I love me some spying".
603.
by cpuguy83 6y ago
SELinux would have prevented a number of container breakout issues. That said, as someone one time worked on an SELinux issue in Docker and then became the defacto "expert"... it's a terrible mess, often coming with incompati
604.
by cpuguy83 6y ago
Most of the places I order from are on only one of these apps.
605.
by cpuguy83 6y ago
The thing with GrubHub, UberEats, etc... is they are (usually exclusive) marketing services masquerading as delivery services. What's infuriating is knowing they are charging 30% in addition to the 10% they charge me, the consumer... a
606.
by cpuguy83 6y ago
I used it effectively to denormalize and combine some data from other services... sort of like a 2nd level, queryable cache. Worked very well for my needs. This was 7-8 yrs ago.
607.
by cpuguy83 6y ago
You can also run Docker in rootless mode.
608.
by cpuguy83 6y ago
It's the same user, but with locked down access (by default). As an example, can't ptrace by default. A container is a process with some kernel isolation mechanisms setup around it. Unless one of those mechanisms is a user namespa
609.
by cpuguy83 7y ago
It's all hard work. The primitives of containerization are in the kernel, but executing and managing them, especially securely, takes a fair amount of trial and error to do it right.
610.
by cpuguy83 7y ago
Governments are reacting to a seemingly very high infection rate with a (best case from the numbers I've seen) fatality rate 10x higher than the flu and the inadequacy of healthcare systems to shoulder the burden all at once (which has
611.
by cpuguy83 7y ago
They addressed this in another post on HN. Basically they don't want to manage U/P. They are looking at other services as well (such as github).
612.
by cpuguy83 7y ago
Suppressed is not quite the right word. Too many inputs (from the community) and not enough help managing and maintaining, and curating these inputs is really what this is. That said, I don't personally believe there exists a single sp
613.
by cpuguy83 7y ago
The performance of the fs is not really related to the container fs (apfs seems like it could be great for a container fs, in theory), but rather the fs being shared across the VM barrier which enables sharing developer-local files with the
614.
by cpuguy83 7y ago
See https://github.com/firecracker-microvm/firecracker-container...
615.
by cpuguy83 7y ago
Yes! Check out https://nixery.dev/
616.
by cpuguy83 7y ago
I'm not sure I understand what you mean by workarounds and "leavings standard tooling"
617.
by cpuguy83 7y ago
Dependcies are also for multiple stages, e.g.: So `COPY --from=<some stage>` and `FROM <other stage>` Also, a Dockerfile is just a frontend for buildkit. The heart of buildkit is "LLB" (sort of like LLVM IR in usage) w
618.
by cpuguy83 7y ago
Docker's build system has been given a huge overhaul and does create a dependency tree. It is highly efficient and even does things like support mounts for caching package downloads, build artifacts, etc. See https://github.
619.
by cpuguy83 7y ago
Probably best not to use `time.After`, because it indeed starts a timer that you have no control over unless you are waiting for the full time.
620.
by cpuguy83 7y ago
Except you do actually pay that $10k, just in the form of money taken out of your pay check to pay for insurance. Insurance which you are likely not wanting to take advantage of because even with insurance you pay out of pocket (albeit sub
621.
by cpuguy83 7y ago
Yep. This was a big problem there. Before they were delivering content to PC's they distributed content via DVD once per month. DVD player failure rate was pretty massive, especially since they just started recycling refurbed players.
622.
by cpuguy83 7y ago
I doubt most consumer applications write to the database nearly as often as we were. Also very likely a particular model of the drive and also sheer luck that one worked and one did not.
623.
by cpuguy83 7y ago
Yep, exactly this. The drives were fine, only the database was getting corrupted.
624.
by cpuguy83 7y ago
In another life (2007) I worked for a company that does digital signage. We had about 8000 systems deployed across the US. The software on them relied heavily on SQLite. At some point we started seeing random corrupted SQLite databases. Try
625.
by cpuguy83 7y ago
A good presentation is rarely unrehearsed.
626.
by cpuguy83 7y ago
Reading this it seems to imply that iOS doesn't support this (sorry if not!), but it does and has for a very long time.
627.
by cpuguy83 7y ago
Competition also plays a role here... not that there should be competition in filing simple tax returns... but competition often leads to better goods/services. There is not much to incentivize a government run program to be better oth
628.
by cpuguy83 7y ago
On that migraine medication... all insurance companies limit the amount I can receive each month the a number much fewer than the migraines I get. These migraine meds expect that you take it on the onset of the headache, often before you k
629.
by cpuguy83 7y ago
My last job's insurance plan cost me $800/mo (family) just for the pleasure of having. Even with the insurance (which changed half way through employment) things like my migraine medication was still $150/mo on top of that (b
630.
by cpuguy83 7y ago
You have to take into account that Intel is having problems getting their next-gen architecture out the door.... who knows what it will bring good or bad... heck maybe even some of the delay is "oh crap Zen even beats our next-gen&quot

More ›