nijave

30 ms·

631.
by nijave 2y ago
Containers are fine. Run them on a Linux host to save yourself some headaches
632.
by nijave 2y ago
I'm glad I'm not configuring php-fpm and compiling PHP add-ons from source. Someone else can shove that in a tarball (Docker image) for me
633.
by nijave 2y ago
RTO - best effort RPO - wait? You guys have backups and test then??
634.
by nijave 2y ago
Inconsistent how? Postgres can recover from a crash or loss of power which is more-or-less the same as a filesystem snapshot
635.
by nijave 2y ago
https://pgtune.leopard.in.ua/ is a pretty good start. There's a couple other web apps I've seen that do something similar. Not sure on "easy" backups besides just running pg_dump on a cron but it's
636.
by nijave 2y ago
If a filesystem backup isn't consistent, the app isn't using sync correctly and needs a bug report. No amount of magic can work around an app that wants to corrupt data. For most apps, the answer is usually "use a database&qu
637.
by nijave 2y ago
Correct, they're designed for maximum compatibility. Postgres doesn't even do basic adjustments out of the box and defaults are designed to work on tiny machines. Iirc default shared_mem is 128MB and it's usually recommended
638.
by nijave 2y ago
There's only a handful of web apps packaged in the OS repo. Even wildly popular software like WordPress and Drupal you need to use their built in facilities or manually apply outside the OS update manager
639.
by nijave 2y ago
Rclone won't take a consistent snapshot so you either need to shutdown the thing or use some other tool to export the data first
640.
by nijave 2y ago
Why not zfs snapshots? Besides using Hyper-V machine snapshots, that's been the easiest way, by far, for me. No need to worry about the 20 different proprietary tools that go with each piece of software. Each VM or container gets a dat
641.
by nijave 2y ago
Don't expose anything to the Internet. Use a tunneling tool (Tailscale et al) or VPN
642.
by nijave 2y ago
>Actually if Intel were to push 18A on server it would make performance / density even better Don't you end up needing pretty insane electric capacity not to mention cooling for that kind of density?
643.
by nijave 2y ago
Not sure Amazon posts much about S3 architecture but some years ago I think they had an article about using spinners. They had so many HDDs, though, that 100-250 IOPs * <the insane number of total drives> meant they still had insane t
644.
by nijave 2y ago
Not sure cloud is necessarily more resilient--imo it's less resilient. On the other hand, it's fully automated with robust APIs so there's easy tools to mitigate failures like node/machine sets (scale sets, scaling group
645.
by nijave 2y ago
Well yeah, but indirectly through the usage of Docker, I mean. Unpacking the Docker image tarballs can be a bit expensive--especially with things like nodejs where you have tons of tiny files Tearing down overlayfs is a huge issue, though
646.
by nijave 2y ago
Can tmpfs be backed by persistent storage? Most of the recent stuff I've worked on is a little too big to fit in memory handily. Ideally about 20GiB of scratch space for 4-8GiB of working memory would be ideal. I've had good succe
647.
by nijave 2y ago
For me, I think they're valuable but also overhyped. They're not at the point they're replacing entire dev teams like some articles point out. In addition, they are amazingly accurate sometimes and amazingly misleading other
648.
by nijave 2y ago
Really if you could just disable fsync at the OS level. A bunch of other common package managers and tools also do. Docker is a big culprit If you corrupt a CI node, whatever. Just rerun the step
649.
by nijave 2y ago
I think there's also some middle ground where you don't go out of your way to carry a laptop but you do best effort while maintaining a normal outside-work life.
650.
by nijave 2y ago
I like looking at lines removed and, in context with, lines added or PR count. Someone more experienced will be refactoring and removing old stuff while adding new stuff and will have some balance (barring vendoring or moving file trees bet
651.
by nijave 2y ago
I don't think productivity itself is absurd but it's definitely a hard thing to do, especially in small time intervals. I think it's important to measure employee performance and you can definitely can a macro look and say &q
652.
by nijave 2y ago
Don't forget about the type of software. Something really specialized or algorithm heavy (science or math heavy) might be harder to do solo than a CRUD app.
653.
by nijave 2y ago
Iirc you can enable Remote Desktop and block public access and connect over an SSH tunnel. Newer versions of Windows include an SSH server.
654.
by nijave 2y ago
I use Home Assistant and Frigate for security cams. I have a rack mount server with Ubuntu that acts as a NAS with NFS for ipcam video and SFTP for SwiftBackup from my phone. I don't host my own password manager but iirc you can self h
655.
by nijave 2y ago
Thanks for the details on cache & agree with the rest LadyBird and Servo are both interesting projects however I imagine still many years out of their succeed
656.
by nijave 2y ago
You have to trust 3rd parties at some point. Apple can make it reasonably secure and let the user decide if 3rd party accessories are worth the potential risk but that option is never exposed. Really Apple allows HTTPS connections but the s
657.
by nijave 2y ago
I see I said "Chrome" in the original post but the other poster replied with "Chromium". I intended "Chromium forks and derivatives" Maybe you consider those just as bad, though
658.
by nijave 2y ago
iirc more about:config tweaks from FasterFox project helped a bit. Anecdotally, I've never seen Chromium be any more or less memory efficient (well maybe 10 years ago but not recently). For the longest time, if you left Firefox sitting
659.
by nijave 2y ago
You'd still have to MITM HTTPS which is non-trivial (compared to installing an extension) and accept the risks of managing your own CA Afaik uBlock benefits from some browser APIs that can do things like prevent content from loading be
660.
by nijave 2y ago
There are malicious ads and dark patterns around ad design to trick users into clicking them. I don't think it's security in the "vulnerability" sense or "privacy" sense but more in the "phishing preventio

More ›