tuananh

9 ms·

121.
by tuananh 9mo ago
the missing piece of unikernel is debuggability & observability - it need to be easy to replicate on dev machine & easy to debug - it needs to integrate well with current obs stack. easy to debug in production. without clear debugga
122.
by tuananh 9mo ago
i tried 5 items. all of the prices are widely off. i just gave up.
123.
by tuananh 9mo ago
few years ago, everyone thought Cue is gonna replace YAML. Event Dagger (a big Cue believer) deprecated their Cue SDK back in 2023.
124.
by tuananh 9mo ago
we built a argocd preview that render diff for MR. reviewing a MR that upgrade helm chart version is a lot less scary.
125.
by tuananh 9mo ago
true. if you already follow all the best practices & principles from the "old days", you will be fine :)
126.
by tuananh 9mo ago
One can argue that it can be that way if you hook the agent to github/gitlab or jira.
127.
by tuananh 9mo ago
> Rewriting it over and over again in the same manner and expecting improvement is not the kind of engineering I want to do. let's step back a bit and see this from a single system perspective. you are already doing it (optimizing a
128.
by tuananh 9mo ago
thank you! i missed that news
129.
Architecture for Disposable Systems(tuananh.net)
58 points by tuananh 9mo ago|31 comments
130.
by tuananh 9mo ago
how does it benefit for clickhouse?
131.
by tuananh 9mo ago
how much does it cost in term of electricity per month?
132.
by tuananh 9mo ago
this attack is quite nice. - currently we have no skills hub, no way to do versioning, signing, attestation for skills we want to use. - they do sandboxing but probably just simple whitelist/blacklist url. they ofcourse needs to whitel
133.
by tuananh 9mo ago
`dnf install --nogpgcheck` olps
134.
by tuananh 9mo ago
wait until you have to use puppet :D
135.
by tuananh 9mo ago
I would much prefer to use RHEL/Fedora image mode for this. Use Dockerfile syntax. Immutable. Easy to update/rollback. CIS hardening baked in. ``` [customizations.openscap] datastream = "/usr/share/xml/sca
136.
by tuananh 10mo ago
> One vulnerability is still not fixed after a 90-day disclosure window that ended in October 2024. It remains unaddressed as of this publication. curious why now. should they public it last year after 90-day disclosure window ended?
137.
by tuananh 10mo ago
maybe more like throw shits to the wall and see what sticks?
138.
by tuananh 10mo ago
they have been doing that for awhile now (last few (2-3) years) for ebs (gp3) and ec2 (gen 8) instances.
139.
by tuananh 10mo ago
or just not ready for commitment (try first, buy later, etc...)
140.
by tuananh 10mo ago
tsmc n2 i think (2nm)
141.
by tuananh 10mo ago
it's a bit weird to talk about yourselves in third person
142.
by tuananh 10mo ago
that's going a bit far, no?
143.
by tuananh 10mo ago
but keeping the CNA and decide, "nah, i wont number it" instead?
144.
by tuananh 10mo ago
if they really think that, they should have remove their CNA, no?
145.
by tuananh 10mo ago
this is why redhat is still relevant in 2025. there's always a need for this kind of work.
146.
by tuananh 10mo ago
wow we need license to enable features already supported by hardware. prev i only saw this practice in data center space.
147.
Windows 11 Outperforming Linux on an Intel Arrow Lake H Laptop(phoronix.com)
83 points by tuananh 10mo ago|72 comments
148.
by tuananh 10mo ago
https://obeli.sk/blog/comparing-dbos-part-1/
149.
by tuananh 10mo ago
There's also Sprout by Edera https://github.com/edera-dev/sprout > Sprout: UEFI Bootloader in Rust
150.
by tuananh 10mo ago
it's a fork of gitea.

More ›