fidget

7 ms·

91.
by fidget 11y ago
Not open source.
92.
by fidget 11y ago
Would be great to be able to just send a CSR (my workflows would be less manual). Also, the plugin model doesn't seem to provide any way to implement a certificate issuing policy (this person can issue certs under this intermediate wit
93.
by fidget 11y ago
Well that explains the enternal question of why only half the Northern line stops at Mornington Crescent.
94.
by fidget 11y ago
> Mesos has been simulated to scale to 50,000 nodes, although it is not clear how far scale has been pushed in production environments Apple are "many thousands"[0] to provide Siri, and Twitter use it for pretty much everything
95.
by fidget 11y ago
Because client support isn't there for nameConstraints. I really wish it was though.
96.
by fidget 11y ago
The AU has a strict 'no border changes' policy, mostly to try and protect from extra-continental bodies interfering with African affairs. Somaliland is a case where that policy is maybe lacking a little nuance. That said, there ar
97.
by fidget 11y ago
We've been managing ecosystems for quite a while now. Them being underwater is interesting, but not wholey novel.
98.
by fidget 11y ago
> Syslog is just a [family] of network protocols[, most informally specified.] syslog-ng (my syslog of choice) has 3 'syslog' network protocols. `tcp`/`udp`, `network`, and `syslog`. Now lets play 'match the syslog-ng
99.
by fidget 11y ago
Which syslog?
100.
by fidget 11y ago
Wonder what the advantage over just plain syslog is
101.
by fidget 11y ago
It's more shared state than mesos, a strict 2 layer system, which is why the comparisons to kube are more common.
102.
by fidget 11y ago
Oh thank god. Go is bearable in most areas, but the template system makes me weep. Is there any particular reason the string concatenation doesn't work? Seems special enough to be specialcased ;)
103.
by fidget 11y ago
`x.x.x.x foobar.com` Where x.x.x.x:80 is a redirect to some malicious site. Here's hoping foobar.com set up HSTS
104.
by fidget 11y ago
Sure. I just prefer selinux (along with most of the MAC using world), so this is a negative for me.
105.
by fidget 11y ago
I like how rkt moves the concept of the pod down the stack into the execution layer
106.
by fidget 11y ago
Atm (assuming LTS) you'll have to use upstart, which sucks. Terrible selinux support also.
107.
by fidget 11y ago
I do wonder why the GP would want to, given how ridiculously reliable zookeeper is.
108.
by fidget 11y ago
Wasn't their response to turn up a couple of timeouts?
109.
by fidget 11y ago
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT # Create a chain for outgoing proxy traffic -N PROXY_OUT -A OUTPUT -m owner --uid-owner proxy -j PROXY_OUT # Allow replies to the requestor -A PROXY_OUT -p