cpuguy83

8 ms·

91.
by cpuguy83 1y ago
Do you have an example?
92.
by cpuguy83 1y ago
Concerned about cve's but doesn't pay attention to the massive list of cve's for rootless setups which have a much broader scope/impact.
93.
by cpuguy83 1y ago
Anyone running this on Linux? I find it works fairly poorly there. To be fair, vscode is also not great for me (especially vim mode) on Linux.
94.
by cpuguy83 1y ago
No, it's saying the door is a lie. At least within the context of your statement about vulnerabilities.
95.
by cpuguy83 1y ago
That is a ridiculous statement. In the case of userns exploits there have been many and it means that every unprivileged user can obtain root on the machine. Whereas rootful docker is a well known thing, run on millions of machines, and non
96.
by cpuguy83 1y ago
Escalating from an unprivileged user to root by creating userns and exploiting various things in the kernel along the way.
97.
by cpuguy83 1y ago
https://microsoft.github.io/wassette/ does just this, using wasi components.
98.
by cpuguy83 1y ago
I mean obviously it's about chip production, but shitting on the chips act is a political stunt and nothing more. Building fabs takes lots of money and time. Intel also doesn't have customers except themselves and have fallen far
99.
by cpuguy83 1y ago
They are talking just about what's in the container there, not the whole stack.
100.
by cpuguy83 1y ago
https://github.com/Azure/dalec Build system packages and containers from those packages for a given target distro. Behind the scenes it uses buildkit, so it's no extra stuff you need, just docker (or any buildkit
101.
by cpuguy83 1y ago
Pretty sure iTerm is the only term that implements that tmux protocol.
102.
by cpuguy83 1y ago
Yavascript
103.
by cpuguy83 1y ago
Hard disagree. The extensions were terrible, at least for what I want, and probably can't integrate with the UI in the same way.
104.
by cpuguy83 1y ago
Not on Apple Silicon it's not. In the Intel days, sure it was great.
105.
by cpuguy83 1y ago
So say we all.
106.
by cpuguy83 1y ago
I don't understand the versioning argument. New to nix, but I definitely have packages from a specific commit.
107.
by cpuguy83 1y ago
I get what you are trying to say, but no spam filter means no users at all. Not a valid comparison in the slightest.
108.
by cpuguy83 2y ago
One of the things LLM's/natural language programming brings is greater access. While the actual code may be crap, it opens up things to more people to play around and iterate on ideas without having to have a ton of knowledge. Tha
109.
by cpuguy83 2y ago
It's pretty simple on Debian/Ubuntu.
110.
by cpuguy83 2y ago
That's what makes it approachable (though I don't agree it has an semblance to go other than "FROM <ref>" being fully qualified (minus the carve-out for Hub), but even then it can absolutely act more like a local i
111.
by cpuguy83 2y ago
They do have special provisions for OSS projects hosting their images on DH. I don't know all the details, but you should be able to find it in the docs.
112.
by cpuguy83 2y ago
Gee thanks for explaining the container ecosystem to me. Docker wasn't stolen from anything. It built on top of existing things, even worked on new things, and provided a nice abstraction to everything. > provide something like D
113.
by cpuguy83 2y ago
Go look at the wayback for the exact page the OP is linking to.
114.
by cpuguy83 2y ago
The name is not being set in the manifests, though. The only reference between objects are digests. The only place an image name is stored is actually independent of any manifest, it is an endpoint in the registry that resolves the give
115.
by cpuguy83 2y ago
Who's adding image name (with or even without repo name) to the manifest? That's just a terrible idea.
116.
by cpuguy83 2y ago
This was announced last year.
117.
by cpuguy83 2y ago
I don't see how that particular issue is relevant here. Add a port number to the reference, problem solved. The reality is, DockerHub (though originally called the Docker Index), was the first Docker image registry to even exist, and i
118.
by cpuguy83 2y ago
The crypto changes are being rolled into mainstream Go, just that mainstream Go does not want the openssl/SCOSSL/SymCrypt parts.
119.
by cpuguy83 2y ago
Sort of... AzureLinux is a rebranding from CBL-Mariner. But 3.0 is an actual new version of the distro with newer packages (like going from Ubuntu 22.04 to 24.04, as an example).
120.
by cpuguy83 2y ago
The real loss here is when my kids realized that they can no longer access CapCut.

More ›