nyrikki

60 ms·

901.
by nyrikki 4y ago
I agree that dpkg-divert is a good way also, just that in my experience it is easier to use alternatives for many teams as fpm requires less institutional knowledge. Point being is that at least in my opinion, using the audit system is the
902.
by nyrikki 4y ago
As someone who lived though one AI winter and seriously fears another, I view fighting hype is important to allowing useful research to happen. 'Super position' and 'entanglement' have been overly mystified in QM in gene
903.
by nyrikki 4y ago
To expand on the point, /usr still has to support the shared NFS mount model that has mostly been irrelevant for 20 years, the old perl alternatives was partially written to deal with that case. I am pretty sure python2-minimal still t
904.
by nyrikki 4y ago
That is an advantage not a reason it can't be used. Yes alternatives(8) points a symbolic link to a name in the alternatives directory, which means that when you custom package's link to /user/bin/python is overwrit
905.
by nyrikki 4y ago
Why not just use the alternatives(8) to create a wrapper script to log use?
906.
by nyrikki 4y ago
Are your Docker images x86_64? On an M1 Mac x86_64 images run under qemu which is very slow, If an ARM64 image is available it should run a bit faster.
907.
by nyrikki 4y ago
Yoke steering wheel fundamentally interferes with skid recovery. a few moments in a skid monster or on a skid pad will show you why hand over hand is the only way to maintain control. It is the same reason steering wheel knobs are a bad ide
908.
by nyrikki 4y ago
Pepsi probably bought their delivery slot for the publicity more than the trucks being practical. It isn't like they got the first delivery slot by finding a golden ticket in a chocolate bar.
909.
by nyrikki 4y ago
You still have to look over you shoulder when merging and need the ability to shift your body to see in the mirror or to check where your tire is when backing up. I get that lots of car drivers merge by faith, but you kill people and potent
910.
by nyrikki 4y ago
The Halting Problem is typically used because it was one of the first proven as undecidable, same reason in P vs. NP questions often use SAT. C++ templates, Haskel templates, Lisp macros, etc... are all examples of metaprogramming facilitie
911.
by nyrikki 4y ago
Note that I was responding to post mentioning 'provably correct code' which is very different opportunistic efforts to improve code. Valgrind and fuzzing are useful tools, but there is no general method. Being semi-decidable, wit
912.
by nyrikki 4y ago
I think you may run into the halting problem here.
913.
by nyrikki 5y ago
Remember "Linux" is just the kernel, it is not an operating system itself. Alpine or Debian including libC is more equivalent to the BSDs including it.
914.
by nyrikki 5y ago
Make sure you are at least using user namespaces which drop the mknod cap by their nature, or better yet in rootless mode. I have filed several bugs that I know can result in breakout but as I can't make myself disclose vulnerabilities
915.
by nyrikki 5y ago
A very important implementation detail if you are digging into the kernel due to performance problems like in the OP. But yes, in the naive user perspective case the contract hasn't been violated.
916.
by nyrikki 5y ago
"two approaches but run data pipelines in a fully isolated environment - containers - which prevents user code from breaking free." While (user) namespaces, root-less and cgroups do slightly reduce the attack surface, they are sti
917.
by nyrikki 5y ago
If you look in the glibc source code in `sysdeps/unix/sysv/linux/arch-fork.h` you will see how it is calling clone BTW. In Linux really threads are just tasks that share memory and processes are tasks that do not. fork()
918.
by nyrikki 5y ago
It is not vfork, it is similar to rfork in FreeBSD but note that fork(), vfork(), and __clone() all invoke clone() in Linux post 2.4. The costs of copying the parent tables and creating the task is the only additional cost for fork(), which
919.
by nyrikki 5y ago
To expand on this Linux threads, NPTL and fork() all call clone() under modern Linux and glibc. The flags on that call and mostly what is inherited or dropped is the main difference. Add in pid remapping with namespaces in containers and it
920.
by nyrikki 5y ago
If you are using glibc you really need to see what clone() flags are being passed as fork() is just mapping to clone() with defaults now. Now some of the other libc variants used by space optimized containers like alpine will still use the
921.
by nyrikki 5y ago
The steering ratio is 14.0:1 or 2.3 lock to lock so no-go. Consumers complain about faster steering ratios being darty so I doubt anyone but the Italians will go with faster ratios.
922.
by nyrikki 5y ago
Funny enough I just recently went to training that demonstrated how hand-over-hand steering is a requirement for effective skid recovery. I never thought I would abandon thoughts of owning a car based solely on the steering wheel, but as I
923.
by nyrikki 5y ago
JavaScript does not provide namespaces by default which allows this. Python is built upon namespaces and cycles in dependencies, either viewed as graph theory or kSAT introduce that fun NP-complete problem of version hell. Using `need` in J
924.
by nyrikki 6y ago
While the choice of VM vs container is not one of good or bad in the general sense there are several reasons to choose containers. 1) Containers reduce the number of shared dependencies between the VM and the application. A container based
925.
by nyrikki 6y ago
To add to the other replies, remember that containers do not provide isolation for security, they are simply namespaces. Rootless mode helps provide some isolation and individual machines also provide some isolation. Anyone who can launch a
926.
by nyrikki 8y ago
Correct, in GR gravity is not a force between masses but an effect of the warping of space and time in the presence of mass. That said, Using the concept of "Gravity" as a "force" is very useful in the special or limited
927.
by nyrikki 8y ago
I would clarify on this. 1) Gauge theory only includes Special Relativity, a quantum theory of gravity is simply an unsolved problem so far. 2) In GR gravity is a 'fictitious force', which would cause less problems if they had use
928.
by nyrikki 9y ago
Exactly, on linux you have the entire CPU and memory space to use, as it is just a mapped name space. I will add that the usefulness of seeing the containers PIDS in ps and other tools is more useful than most mac/windows users realize
929.
by nyrikki 9y ago
Apple will never distribute gpl v3 software, this is the reason bash is ancient on mac and why samba is gone. Any license with a Patent clause or Tivoization clause will be verboden. As an example you will never get something that depends o
930.
by nyrikki 9y ago
It actually is :) Under General Relativity what is commonly called gravity is a fictitious force or pseudo force and is purely an artifact of being in a non-inertial frame of reference. While a very useful in most use cases, and accurate fo

More ›