agartner

5 ms·

1.
by agartner 2mo ago
https://news.ycombinator.com/item?id=48892468
2.
by agartner 3mo ago
I'm a big LXD and now Incus fan. But I went with NixOS rather than IncusOS for my latest build because I prefer the LTS linux kernel over the mainline kernel.
3.
by agartner 3mo ago
> the courts don’t care if the license is “as-is”. There isn't any case law to show that. Certainly not in the age of AI. On the criminal side, the CFAA requires "intentionally causes damage" and that's entirely impos
4.
by agartner 5mo ago
Yeah I think I've finally had enough. I need to start seriously advocating for alternatives since this is starting to impact our business. It's clearly not getting any better.
5.
by agartner 5mo ago
There was another really bad incident today: https://www.githubstatus.com/incidents/zsg1lk7w13cf > We have resolved a regression present when using merge queue with either squash merges or rebases. If you use merge
6.
by agartner 7mo ago
If anyone is looking to make a similar thing in go I suggest https://pkg.go.dev/mvdan.cc/sh/v3/interp I've been using it to make my own sandbox that is much more configurable than the default claude code
7.
by agartner 8mo ago
Tailscale policy tests are a bit hard to write but help us have confidence in our changes. https://tailscale.com/kb/1337/policy-syntax#tests
8.
by agartner 9mo ago
I guess it was only a matter of time... Part of this is fair since there is a cost to operating the control plane. One way around this is to go back to using check runs. I imagine a third party could handle webhooks, parse the .github/
9.
by agartner 10mo ago
I've been using this for a ~year now and it works very well. Thanks!
10.
by agartner 10mo ago
https://github.com/Foxboron/ssh-tpm-agent works well for me
11.
by agartner 1y ago
Working on decently cool things with relatively limited bureaucracy.
12.
by agartner 2y ago
Yeah just typical Debian stuff. jwz has been ranting about this for years. It's not worth spending any time on it. Some suggestions: - Only "supporting" the latest mainline kernel and latest tools. I prefer to point to CI sys
13.
by agartner 2y ago
I've been patiently waiting to convert my ZFS array to bcachefs. I'm very excited about better SSD promotion logic. But I'm not willing to spend any time on an experimental filesystem on my main systems. > But you can expe
14.
by agartner 2y ago
Here's a quick example I put together on how to use these runners to accelerate docker builds: https://github.com/gartnera/actions-arm64-native-example
15.
by agartner 2y ago
There are attestations that the binaries were built via CI: https://userdocs.github.io/qbittorrent-nox-static/artifact-a... Here's a verification of the latest build: gh attestation verify x86_64-qbittorrent-n
16.
by agartner 2y ago
Spending all their security time/budget on box checking rather than actual security. I'd rather see open ended red team pentest reports.
17.
by agartner 2y ago
It seems most if not all google domains are HSTS preloaded so no you can't: https://hstspreload.org/?domain=script.google.com
18.
by agartner 2y ago
Yep I'm getting 503's. But the status page says nothing is wrong: https://www.dockerstatus.com/ Update: I configured the gcp docker mirror and can pull images again https://cloud.google.com/artifac
19.
by agartner 3y ago
Working well for me on a 7900XT with ROCm 6 and Linux 6.7.5 thanks!
20.
by agartner 4y ago
I personally just blocked all the lg domains in AdGuard. That way I can keep using the apps. With full internet access the tv takes significantly longer to load and navigate.
21.
by agartner 4y ago
Yes we exclusively use google meet. It's very nice. I feel pain every time I have to use anything else.
22.
by agartner 4y ago
Fractional scaling and no screen tearing are the main reasons I chose to adopt Wayland (sway) ~2 years ago.
23.
by agartner 4y ago
Using a wildcard domain (*.agartner.com) helps mask the actual subdomain fyi
24.
by agartner 5y ago
We blocked the annoying snapd autoupdate behavior by setting a http proxy to a nonexistent server. Whenever we had a maintenance window we would unset the proxy, allow the update, then set the set the nonexistent proxy server again. Very an
25.
by agartner 8y ago
singularity does partially support running without suid: https://github.com/sylabs/singularity/issues/1258 charliecloud is designed specifically not to need suid: https://github.com/hpc/c
26.
by agartner 11y ago
Scallion ( https://github.com/lachesis/scallion ) works really good for this. It uses OpenCL to leverage your GPU's to make cracking really fast.
27.
by agartner 11y ago
It might not be exactly what you're looking for but you might take a look at https://github.com/DSUOSS/unix-chat .