man8alexd

11 ms·

91.
by man8alexd 8mo ago
8-16-32gb of swap space without cgroup limits would get the system into swap thrashing and make it unresponsive.
92.
by man8alexd 8mo ago
Actively used executable pages are explicitly excluded from reclaim. And if they are not used, why should they stay in memory when the memory is constrained? It is not the first time I have heard complaints about executable pages, but it se
93.
by man8alexd 8mo ago
Location: Tbilisi, Georgia (UTC+4) Remote: yes (working exclusively remotely for the past 20 years) Willing to relocate: yes Technologies: AWS, Kubernetes, Nomad, Docker, podman, Hashicorp Consul, Vault, Packer, Terraform, Ansible, Chef, Pu
94.
by man8alexd 9mo ago
A more interesting metric is a steadily declining percentage of answered questions. It used to be above 90% in the first year and since then dropped to 35% but stabilized around this number for the last 2-3 years. Source: https:/&#x2F
95.
by man8alexd 9mo ago
https://serverfault.com/questions/tagged/terraform https://devops.stackexchange.com/questions/tagged/terraform
96.
by man8alexd 9mo ago
Location: Tbilisi, Georgia (UTC+4) Remote: yes (working exclusively remotely for the past 20 years) Willing to relocate: yes Technologies: AWS, Kubernetes, Nomad, Docker, podman, Hashicorp Consul, Vault, Packer, Terraform, Ansible, Chef, Pu
97.
by man8alexd 10mo ago
Just dropped https://www.youtube.com/watch?v=o78vnXfih8E
98.
by man8alexd 11mo ago
Location: Tbilisi, Georgia (UTC+4) Remote: yes (working exclusively remotely for the past 20 years) Willing to relocate: yes Technologies: AWS, Kubernetes, Nomad, Docker, podman, Hashicorp Consul, Vault, Packer, Terraform, Ansible, Chef, Pu
99.
by man8alexd 11mo ago
Don't use Active/Inactive pages from /proc/meminfo. They don't represent the actual size of active/inactive memory.
100.
by man8alexd 11mo ago
I can suggest measuring working set size (WSS) instead of RSS. See https://docs.kernel.org/admin-guide/mm/multigen_lru.html and https://docs.kernel.org/mm/damon/index.html
101.
by man8alexd 11mo ago
mmap'ed memory counts as that "reclaimable cache", which isn't always reclaimable (dirty or active pages are not immediately reclaimable). But Kubernetes memory accounting assumes that the page cache is always reclaimabl
102.
by man8alexd 11mo ago
There is a database that uses `mmap()` - RavenDB. Their memory accounting is utter horror - they somehow use Commited_AS from /proc/meminfo in their calculations. Their recommendation to avoid OOMs is to have swap twice the size o
103.
by man8alexd 11mo ago
> he is dismissive of his staff's concerns, he bullies them into submission, and he has a callous indifference to safety. I suspect that you are sourcing "Midnight in Chernobyl", which is based on Medvedev's book, whi
104.
by man8alexd 11mo ago
You do understand that the series is a fiction? The scan of the letter is available online, there are no redactions and no security classification markings. http://accidont.ru/PS_letter.html
105.
by man8alexd 11mo ago
Mazin almost completely ignored the INSAG-7 report and in the last episode, they retell the same fictional story blaming the operators that Legasov himself presented in Vienna in 1986 to the IAEA meeting, which was published as the original
106.
by man8alexd 11mo ago
Everything about nuclear reactors was secret by default, no student would have known any details about the RBMK reactor. The "positive scram effect" was discovered at Ignalina (where the miniseries were filmed) in 1983. The RBMK d
107.
by man8alexd 11mo ago
There is an article by Dyatlov: "Why INSAG has still got it wrong." https://www.neimagazine.com/analysis/why-insag-has-still-got...
108.
by man8alexd 11mo ago
> the need for visuals in the seconds before the explosion led to a choice to visualise it like the top of a boiling kettle. And this is the lie. Before they pressed the AZ-5 button: (quote from INSAG-7 report) "the parameters of th
109.
by man8alexd 11mo ago
In the late Soviet Union, there was a joke: "We should declare war on Japan and immediately surrender."
110.
by man8alexd 11mo ago
My grandpa had the full 50-volume edition of the encyclopedia published in the 1950s. I spent a lot of time digging through it in my pre-teen years.
111.
by man8alexd 1y ago
You switched from > ease of deployment to > running server farms in production is complex You just confirmed my initial point: > "Dockerfile is simple", they promised. Now look at the CNCF landscape. > with debs you ne
112.
by man8alexd 1y ago
The irony is that the majority of docker images are built from the same packages and break all the same. But in your eyes, `apt install package` is bad but `RUN apt install package` inside a `Dockerfile` somehow makes it reproducible. I sus
113.
by man8alexd 1y ago
If you need a reliable deployment without catching 500 errors from Docker Hub, then you need a local registry. If you need a secure system without accumulating tons of CVEs in your base images, then you need to rebuild your images regularly
114.
by man8alexd 1y ago
There are also health/liveness checks, entry point code, sometimes embedded right in the Helm templates.
115.
by man8alexd 1y ago
Unless my memory fails me, OpenVZ was never upstreamed.
116.
by man8alexd 1y ago
The same as we have docker images with different OS flavours now: "-debian", "-alpine", "-slim", etc.
117.
by man8alexd 1y ago
So Debian, Ubuntu LTS, RHEL, distributions with multi-year release cycles are living at the edge? Ok.
118.
The CRA and what it means for us (Kernel Recipes 2025) [video](youtube.com)
1 points by man8alexd 1y ago|1 comments
119.
by man8alexd 1y ago
Greg Kroah-Hartman's talk on the Cyber Resilience Act (CRA)
120.
by man8alexd 1y ago
"Dockerfile is simple", they promised. Now look at the CNCF landscape.

More ›