lima

123 ms·

721.
by lima 6y ago
Cool educational project! runc - which is the low-component that does the actual container launching in Docker and other runtimes - is mostly written in Go and quite approachable[1], if you're curious what a production-ready container
722.
by lima 6y ago
ClickHouse also supports incremental streaming from Kafka into a materialized view. You can even detach and reattach the view from its backing table.
723.
by lima 6y ago
I fully agree with all of what you said. There's a big difference between "hey can you dump this VM for me please" and "hey please implement this paper to dump this customer's VM" and it provides cloud provider
724.
by lima 6y ago
It's apples and oranges. SEV is useful for defense in depth and absolutely not comparable a secure enclave like SGX or TrustZone. However, it results in significant security gains with almost no extra effort. Secure enclaves like SGX a
725.
by lima 6y ago
Consumer devices still have other DRM technologies like PAVP/HDCP. SGX is simply unnecessary for consumer-hostile DRM. I don't think SGX + PAVP ever made it past the prototype stage, and the SDK is proprietary. My company actually
726.
by lima 6y ago
Yes - in a recent paper by Wilke et al[0], they nicely demonstrate how the lack of integrity checking can be exploited. SEV is a very new technology and its current (and previous) iterations have known weaknesses. The next generation of SEV
727.
by lima 6y ago
Still useful for plausible deniability if the government comes knocking.
728.
by lima 6y ago
SEV is exciting because it has a much better cost-to-benefits ratio. It provides useful defense in depth without requiring any changes to the application stack - you can run regular VMs with syscalls, plenty of memory and high-bandwidth IO.
729.
by lima 6y ago
> Sundar came from Chrome. Fuchsia didn't. Fuchsia appears to be really close to Chrome/Chrome OS - they even share the build system and many components.
730.
by lima 6y ago
Easy for a user, perhaps, but imagine maintaining it!
731.
by lima 6y ago
Android is open source. Alternative app stores exist. Play Services can be replaced.
732.
by lima 6y ago
What usually happens is that legitimate certificates are stolen.
733.
by lima 6y ago
Just to make sure, this is a joke, correct?
734.
by lima 6y ago
It's not yet public - it's a new server OS for k8s. Think of CoreOS, but without a traditional userland and fully stateless. And yes, we're on the newer syntax :-)
735.
by lima 6y ago
Yes, unfortunately, most of my work is on low-level shared libraries and it often wants to rebuild everything.
736.
by lima 6y ago
I work with a ~10k line project and it takes 60s to incrementally compile on a Ryen 3990X. Rust is great, but the compile times do need to improve :-)
737.
by lima 6y ago
Recently migrated my company's k8s product to Cue and it's pure bliss. Configuration should be data, not code. Cue has just the right amount of expressivity - anything more complex shouldn't be done at the configuration layer
738.
by lima 6y ago
SVN is also quite popular, it's okay at dealing with large repos.
739.
by lima 6y ago
What's the point of SELinux support in a k8s environment, where services are already sandboxed by the container runtime? It's unsafe to run untrusted workloads in the host kernel using only namespaces - SELinux does not change thi
740.
by lima 6y ago
It's not universally recognized by all filters, and much less entertaining.
741.
by lima 6y ago
The best part is that Caltrans inspected it and left it up!
742.
by lima 6y ago
I wonder how their promise to have them operate independently is going.
743.
Gogo Protobuf looking for new ownership(github.com)
2 points by lima 6y ago|0 comments
744.
by lima 6y ago
We made an effort to reach out to our regional GCP sales team when we moved to GCP and ended up with an account manager and solutions engineer. They've been very helpful and if we have hard questions, we can ping them. Not a huge spend
745.
by lima 6y ago
The etcd server can be embedded in other projects, and their Raft library is used by plenty of other projects like CockroachDB.
746.
by lima 6y ago
Agreed, etcd is rock solid. With regards to Kafka, it's probably easier and more robust to add their own consensus layer rather than switching to etcd - Kafka is already a distributed system built by a team of distributed systems engin
747.
by lima 6y ago
Not just large companies - plenty of small startups building cool developer tooling. And much more fun when you get to start on a green field, rather than slowly migrating the existing code over the course of a decade.
748.
by lima 6y ago
Currently migrating a data-heavy Firebase project to plain boring Django. We didn't need the realtime and offline features of Firebase and it's a massive pain to work with. A regular SQL database and a good ORM is so much more pro
749.
by lima 6y ago
Both Ansible and Salt are underengineered, but highly convenient.
750.
by lima 6y ago
They also built their own low-level network protocol based on 0mq. Back when I tried it, it had constant keepalive issues behind NAT and would randomly lose messages (that was in 2014, probably better now).

More ›