lima

42 ms·

511.
by lima 6y ago
Jenkins.
512.
by lima 6y ago
At this point, our self-hosted CI and code review tooling has had significantly better uptime for the past year. The advantage of having someone else operate it evaporates when it is neutralized by complexity and scale. The failure modes
513.
by lima 6y ago
That doesn't help one bit with the impedance mismatch that you get when you want to do something that goes against libvirt's abstraction layer.
514.
by lima 6y ago
But they also hid it behind it layers of XML-laden complexity. If you know exactly what you want, using QEMU directly may be preferable.
515.
by lima 6y ago
Thoughtful features like supporting UEFI Secure Boot with vTPM attestation. This allows building setups where even a full GCP account compromise can be mitigated. Integration with our org GSuite (this alone is a massive plus).
516.
by lima 6y ago
Are there any reasonably-sized reflective LCD monitors?
517.
by lima 6y ago
Isn't that kind of a lost fight? So many signed bootloaders and no way to revoke in-the-wild.
518.
by lima 6y ago
Simple > easy should be common sense for anyone who ever worked in a team. Code is written once and read many times (and usually not by the author).
519.
by lima 6y ago
The objective seems to be to stop miners from buying up consumer GPUs. Nvidia added a separate product line for mining.
520.
by lima 6y ago
The beacon chain - the first step in the transition - has already launched: https://beaconcha.in/
521.
by lima 6y ago
> On a side note all those virtual currency are just plain wrong on the environment side, it does not make any sense in 2021 to have a currency that need heavy computation thus increasing power consumption. When people designed those cu
522.
by lima 6y ago
> Only if what they are doing involves a part of their public duties This is about politicians using Clubhouse to talk to their constituents. It qualifies.
523.
by lima 6y ago
Politicians should absolutely be held accountable for what they say in a semi-public ("pseudo-private") forum. In this context, the journalist is right. Making Clubhouse record the calls is, of course, the wrong solution.
524.
by lima 6y ago
For SSH, use native U2F/FIDO2 OpenSSH support instead: https://www.openssh.com/txt/release-8.2 https://cryptsus.com/blog/how-to-configure-openssh-with-yubi... TOTP with a PAM module is insecu
525.
by lima 6y ago
> Unfortunately SQLite with Go still requires the remote host to have a c compiler (must use CGO) No, you just need the shared object.
526.
by lima 6y ago
> the technology is broken beyond fixability [citation needed] Crypto ideologues are a strawman. Anyone working on the actual tech agrees that blockchains are useful if, and only if, you can't rely on a single party and need a dec
527.
by lima 6y ago
I think it happens even for topics of programming and entrepreneurship. HN is not a representative sample of the software industry.
528.
by lima 6y ago
> Are the other popular submissions here, on programming languages, the internet, entrepeneurship and what have you of similar low quality, but I just don't have the experience in those fields to realize it? Yes, absolutely. There
529.
by lima 6y ago
Hundreds of PoW altcoins are doomed: https://www.crypto51.app
530.
by lima 6y ago
Here's how things are looking in 2021: (1) Scalability Issues Solved - there's a plethora of high-throughput chains in development, either based on sharding or pipelining/MVCC/optimistic concurrency. Some projects like
531.
by lima 6y ago
Everyone (except Bitcoin) agree that Proof of Stake is the way to move forward. Even Ethereum is migrating to pure PoS consensus. This solves the environmental aspect, thankfully.
532.
by lima 6y ago
> IDK what BuildKit features should be added to Buildah, too? Cache mounts are what we rely on for incremental rebuilds.
533.
by lima 6y ago
... aaand a Google engineer showed up to answer the question. The beauty of HN :)
534.
by lima 6y ago
Nice. Does anyone know how this differs from using KVM for this like gVisor does?
535.
by lima 6y ago
Better, yes. Safe, no. Even with ASAN and modern C++, vulnerabilities happen all the time.
536.
by lima 6y ago
Buildkit's caches are a killer feature. They go a long way towards making Docker builds usable for iterative development. We also migrated back to Docker from Podman because of Buildkit and the general bugginess of Podman.
537.
by lima 6y ago
> I wish I could be excited about crun... I’m sure the author has put a lot of effort into it. Instead, I’m more excited about things like Firecracker that attempt to enable people to further isolate containers, even though such a thing
538.
by lima 6y ago
In Europe, outside of business, WhatsApp messages and calls have almost completely replaced regular phone calls and SMS.
539.
by lima 6y ago
But not Buildkit and docker-compose.
540.
by lima 6y ago
Great idea - let's rewrite the most security-critical piece of container tech in plain C! Red Hat literally took a memory safe Go program and rewrote it in C for performance, in 2020.

More ›