paulfurtado

14 ms·

91.
by paulfurtado 7y ago
This isn't actually effective. When there are instance shortages and someone launches an on-demand instance, no matter how high you set your spot bid price your spot instance will still be terminated in favor of the on-demand instance.
92.
by paulfurtado 7y ago
When a spot instance gets interrupted, they've supported terminate, stop, and hibernate for a while. Hibernate is effectively just stop, but has an additional hook inside the instance to tell linux to save memory to disk while shutting
93.
by paulfurtado 7y ago
That said, as an operator of a number of fairly large kubernetes clusters (100-500 nodes), I might prefer java's memory tuneability to Go's garbage collector simply not caring about the max memory a system can offer. At scale, we
94.
by paulfurtado 7y ago
The use case here is turning an outlet or light on/off, so latency matters, but it requires nearly zero bandwidth (assuming that you're not talking tcp). Granted, x10 security cameras exist. x10 speaks a protocol designed for this
95.
by paulfurtado 7y ago
There are classic home automation systems like x10 that potentially predate wifi and offer wired solutions that use the power lines themselves for wired communication, you might want to check these out
96.
by paulfurtado 7y ago
haproxy 1.9 added support for logging to stdout/stderr/files, this is a different feature. This feature looks like it is intended for cases where you're logging to a remote syslog server without any local log files and want t
97.
by paulfurtado 7y ago
In Boston, in the mission hill neighborhood, I was really surprised that the Bank of America ATM handed out $10 bills instead of $20 ~5-6 years ago and that was the only ATM I've encountered that does that. That said, it seems like all
98.
by paulfurtado 7y ago
You can make it dump monthly billing CSVs to s3 daily. You'll get a new CSV each day that contains the month to date so it gets bigger every day until it resets the next month.
99.
by paulfurtado 7y ago
The purpose of using a dynamic DNS service is because you don't have a static IP, isn't it? Services that specifically provide free DDNS may not stick around long, but professional DNS providers with REST APIs change very rarely.
100.
by paulfurtado 7y ago
The goal is to lookup your own public IP address to store it in a DNS record. If you're behind a carrier grade NAT, there isn't much use in that exercise, right?
101.
by paulfurtado 7y ago
FWIW audi does do this rather effectively in my 2011 audi A4 and it also comes with a huge battery compared to other cars I've owned. You can tell if your battery is near EOL by the fact that the entertainment system starts taking 30s
102.
by paulfurtado 7y ago
The way kubernetes uses this streaming is to keep datastructures up to date in memory. A node needs a list of all its pods, so it makes a list call at startup and then starts a watch from that resource version onwards to keep the in-memory
103.
by paulfurtado 7y ago
What issue did you face around network namespace awareness in this setup?
104.
by paulfurtado 7y ago
cri-o and containerd run standard docker images seamlessly. They're mostly drop-in replacements for dockerd. So even if you're using standard dockerd at build time, that's perfectly fine. Things like buildah, kaniko, img, and
105.
by paulfurtado 7y ago
Kata is great if you're already using docker, it also is increased isolation versus lxd. If you don't already have a use case for docker, kubernetes, the image repository features, etc then of course kata wouldn't be useful t
106.
by paulfurtado 7y ago
Kata works pretty well. You set it as a runtime for docker and it gives a fantastic illusion that the container isn't different from any other docker container but uses a KVM VM with minimal hardware to run the container. It starts in
107.
by paulfurtado 7y ago
In this case, this is a library for Go, not a standalone program, so it seems worthwhile to include the language in the description. If there's something technical about Go that makes pure-go implementations of things interesting it&#x
108.
by paulfurtado 7y ago
Random cheap things I've had stolen: - old spice deoderant 6 pack - listerine - pepto bismol - ibuprofen - $20 azamax plant pesticide desperately needed while a houseplant was being destroyed by fungus gnats. Enough value I suppose but
109.
by paulfurtado 7y ago
The official base Ubuntu image is really not particularly large, I'm assuming you were using an image with additional things installed? But regardless, once pulled, it is cached locally. Be sure to reference the image by specific tag&#
110.
by paulfurtado 7y ago
So, for some companies, failing over between providers is actually viable and planned for in advance. But it is known in advance that it is time consuming and requires human effort. The other case is really soft failures for multi-region co
111.
by paulfurtado 7y ago
My argument is that the kernel gives us namespaces, seccomp, selinux, apparmor, etc for isolation and attempting to implement all of the path resolution and permission checking from a privileged context outside of the container defeats all
112.
by paulfurtado 7y ago
To be clear, docker exec is not currently vulnerable to this attack, right? Currently, docker exec (somehow safely) fully enters the container's namespaces and cgroups, then exec's a command inside the container. My suggestion was
113.
by paulfurtado 7y ago
So, `docker exec <container id> cat /path/to/file` is definitely something that works, is as safe as `docker exec`, and doesn't involve running any runtime code inside the container. The expense is that you have ca
114.
by paulfurtado 7y ago
It's certainly possible to call nsenter in Go but even so, unlike other namespaces, mount namespaces affect the entire process rather than threads, and the thread must not have launched any threads yet at the time that nsenter is calle
115.
by paulfurtado 7y ago
This is extremely common at major bars in most states in the US, especially if you're anywhere near a college. It's there to detect fakes. I'd imagine fake IDs are a much larger problem in the US, however, given that the drin
116.
by paulfurtado 7y ago
That's due to no shortage of effort by the maintainers, however: one small bug can easily lead to memory safety problems. Rust is great in this sense because you don't have to think about those issues. That said, I'd pick rus
117.
by paulfurtado 8y ago
Ah, interesting. I wrongly assumed the SoftLayer bare metal servers might be closer to EC2's bare metal offerings where, from the outside, you're given the same set of management tools as a VM, and from the inside, a fairly limite
118.
by paulfurtado 8y ago
Wasn't clear to me from the article whether the firmware was modified via the BMC's network interface or whether it was done locally over some hardware interface exposed to the customer's OS. Was this really done over the net
119.
by paulfurtado 8y ago
I'm a little curious why the BMC hardware is even exposed to the customer at all. Is it provided as a feature or is this just an oversight? Can't they just hide all of this hardware from the customer's OS?
120.
by paulfurtado 8y ago
> For instance how you are charged for S3 traffic your buckets receive even if you don't have any files there. Or how traffic between zones that is outside of your control is still charged. Can you say a bit more about these two thi

More ›