vbernat

31 ms·

361.
by vbernat 9y ago
100s of engineers working on an outage is a mess. It is more likely you have a handful of them on a given outage.
362.
by vbernat 9y ago
You have access to far more parameters through Netlink than through ioctl. For bridges, this includes VLAN tagging, flood behavior, filtering behavior, per-port MAC learning, etc. Any recent development on bridges for Linux is only accessib
363.
by vbernat 9y ago
This seems pretty similar to BPG: https://bellard.org/bpg/
364.
by vbernat 9y ago
It's only reliable if none of your dependencies are spawning goroutines during initialization. If this is the case, some goroutines (yours' or the dependencies') can end up with increased privileges.
365.
by vbernat 9y ago
No, it doesn't. Go runtime can decide to spawn a new thread from the locked one. The new thread will inherit the characteristics (namespace, uid) of the old one. See https://github.com/docker/libnetwork/issues
366.
by vbernat 9y ago
In Linux, many properties are task-related and therefore the API is also task-related. Namespaces are not the only problem. See for example https://github.com/golang/go/issues/1435 . The problem is Go runtime
367.
by vbernat 9y ago
It's odd to keep Google Analytics because you don't have access to logs while being able to provide self-hosted comments. Just add a self-hosted small image on each page.
368.
by vbernat 9y ago
Then, you have to solve the problem with how to seek in a 2-hour long video.
369.
by vbernat 9y ago
For X-XSS-Protection, see: https://bugs.chromium.org/p/chromium/issues/detail?id=654794 . Currently implemented in M57, but you can still disable filtering. This should be removed in the future.
370.
by vbernat 9y ago
Many headers presented here are questionable. X-Frame-Options should be replaced by CSP frame-ancestors. X-XSS-Protection: 1 is the default since a long time for browsers supporting it and Chrome blocks by default since two releases. Referr
371.
by vbernat 9y ago
> I've actually switched to behind-the-ear again - simply because the sound quality is better, in particular the directionality. I just switched from behind-the-ear to inside-the-ear and one of the benefits for me is the directional
372.
by vbernat 9y ago
"args" could be replaced by "comm" to not filter grep. grep could be replaced by awk: ps -A -opid,comm | awk '($2 == "haproxy") {printf "%d ",$1}' However, "pidof haproxy"
373.
by vbernat 9y ago
The new process listen to connections before the old process stop listening. The problem is that the old process can still have new connections queued up. They are lost when its sockets are closed.
374.
VXLAN: BGP EVPN with Cumulus Quagga(vincent.bernat.im)
2 points by vbernat 9y ago|0 comments
375.
Truly Seamless Reloads with HAProxy(haproxy.com)
3 points by vbernat 9y ago|0 comments
376.
Lenovo ThinkPad X1 Carbon Now Supported by Coreboot(review.coreboot.org)
3 points by vbernat 9y ago|0 comments
377.
by vbernat 9y ago
On mine, there is an option to permanently disable AMT in the BIOS. I have enabled it a long time ago. Is it enough?
378.
by vbernat 9y ago
SELinux is currently packaged in Stretch and doesn't have any release critical bug reported. Same for pacemaker and corosync. Dunno if it's actually good enough, but Debian is a community distribution and if nobody cares enough, n
379.
by vbernat 9y ago
Direct link to the announce: https://lists.debian.org/debian-devel-announce/2017/04/msg00... . The Phoronix article doesn't bring anything. The reasons of forfeiting secure boot support can be found in th
380.
by vbernat 10y ago
When I was freelancing, I have looked at many services for online time tracking. As an Emacs user, I finally settled for org-mode: - http://orgmode.org/manual/Clocking-commands.html - http://orgmode.org&#x2F
381.
by vbernat 10y ago
Switzerland has 3 official languages and geoIP is not good enough to determine in which part of Switzerland you are. I always get pages in German despite being in the French-speaking part of Switzerland. Even when traveling abroad I get the
382.
by vbernat 10y ago
Why "problematic"? The Al Viro change mentioned in the fix is https://github.com/torvalds/linux/commit/227158db160449b6513... . The commit says this makes the bug not exploitable since the new helper
383.
by vbernat 10y ago
This doesn't seem true from the commit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... The bug is said to not be exploitable since Al Viro function change. This change hap
384.
Proper isolation of a Linux bridge(vincent.bernat.im)
2 points by vbernat 10y ago|0 comments
385.
by vbernat 10y ago
For better portability, terminfo should be used instead of using hard-coded terminal sequences. Otherwise, this is a really great intro. I liked the beginning with how to put your configure your terminal.
386.
by vbernat 10y ago
You don't have to use all the legacy stuff. See: https://autotools.io/whosafraid.html . You choose what tests you want to run. No need to check if you have unistd.h if you don't care about that. As a rewrite using
387.
by vbernat 10y ago
He also says later in the post you can write your own configure with a bit of bourne shell. If you expect your software to be widely distributed, a custom build script is a pain for distributions as most of them are heavily relying on .&#x2
388.
by vbernat 10y ago
The article downplays a little bit the value of the autotools. It's not just about building for 30-year ago hosts, it's also about providing a lot of convenient tools and providing the user with a known interface. If you write you
389.
by vbernat 10y ago
Go doesn't have a general abstraction for that either. If you put something in a goroutine, you usually cannot cancel it. If you decide to timeout, the goroutine will continue to run. This may not be important for an mkdir(), but this
390.
by vbernat 10y ago
As a complement on how to use Org mode for ops: - http://www.howardism.org/Technical/Emacs/literate-devops.htm... (Literate DevOps) - https://vincent.bernat.im/en/blog/2017-netops-org-mod

More ›