crabique

6 ms·

1.
by crabique 3mo ago
This particular image is a bit different though. By CVEs I mean the architectural stuff that was discovered after the original ingress-nginx repo was archived, so there is no "official" mitigation and it's not just a matter o
2.
by crabique 3mo ago
Is their ingress-nginx-controller image similar to that of Chainguard: a drop-in replacement with the CVEs fixed?
3.
by crabique 4mo ago
At least on ZFS, VersityGW absolutely does use sync IO, found it out the hard way on an HDD zpool with no SLOG...
4.
by crabique 5mo ago
Very cool, I wish there were something similar to this for filesystem images though. Just recently I needed to somehow generate a .tar.gz from a .raw ext4 image and, surprisingly, there's still no better option than actually mounting i
5.
by crabique 5mo ago
I, too, can vouch for ZFS+VersityGW being a great solution, we were able to scale it vertically on a single-node deployment to a pretty high throughput, both reads and writes. Most notably, the PutObject operation (which had always been a p
6.
by crabique 11mo ago
Care to elaborate?
7.
by crabique 1y ago
Yeah unfortunately mirrors is no go due to efficiency requirements, but luckily read performance is not that important if I manage to completely offload FS/S3 metadata and small files to flash storage (separate zpool for Garage metadat
8.
by crabique 1y ago
In their design document at https://garagehq.deuxfleurs.fr/documentation/design/goals/ they state: "erasure coding or any other coding technique both increase the difficulty of placing data and synchroni
9.
by crabique 1y ago
For sure, there is zero expectations for any kind of hardware downtime tolerance, it's a secondary backup storage cobbled together from leftovers over many years :) For software, at least with MinIO it's possible to do rolling upd
10.
by crabique 1y ago
It's a very beefy server with 4 NVMe and 20 HDD bays + a 60-drive external enclosure, 2 enterprise grade HBA cards set to multipath round-robin mode, even with 80 drives it's nowhere near the data path saturation point. The link i
11.
by crabique 1y ago
Thanks, but I forgot to specify that I'm interested in S3-compatible servers only. Basically, I have a single big server with 80 high-capacity HDDs and 4 high-endurance NVMes, and it's the S3 endpoint that gets a lot of writes. So
12.
by crabique 1y ago
Is there an open source service designed with HDDs in mind that achieves similar performance? I know none of the big ones work that well with HDDs: MinIO, Swift, Ceph+RadosGW, SeaweedFS; they all suggest flash-only deployments. Recently I&#
13.
by crabique 1y ago
I wouldn't recommend doing it from a cronjob, there are sometimes things that require sudo to update, breaking changes and important notes from Brew maintainers in the output. It's really important to inspect the output in order t
14.
by crabique 1y ago
The trick for smooth experience is to treat it like `pacman -Syu`: brew update && brew upgrade && brew autoremove && brew cleanup && brew doctor Running this every few days and fixing everything that i
15.
by crabique 1y ago
Most CAs offer them, the only requirement is that it's at least an OV (not DV) level cert, and the subject organization proves it owns the IP address.
16.
by crabique 1y ago
Get a wildcard for the apex domain/higher-level subdomain, the "secret" subdomain will be covered implicitly. If you don't want the certificate to be in the CT logs, your only options are a private CA or things like CF O
17.
by crabique 1y ago
I remember WML <card> tag, essentially SPA 20 years before SPA even became a term.
18.
by crabique 1y ago
This is how it works already, the DoH endpoint is "/dns-query", both CloudFlare and Google route this endpoint to their resolver services, while the rest of the site (one.one.one.one or dns.google) is just a website.
19.
by crabique 1y ago
testssl.sh allows you to scan stuff inside private networks, supports custom ports/SNI, and things like StartTLS.
20.
by crabique 1y ago
There's https://github.com/itchyny/gojq which is pretty popular, even GitHub CLI embeds it for their --jq filter.
21.
by crabique 2y ago
It does not matter, the intent is obvious no matter how they try to spin it, the damage has been done. I am uninstalling Firefox after 16 years of sustained everyday use in dual-browser split setup alongside Safari. I will also make sure ev
22.
by crabique 2y ago
Proper quake mode is just one shortcut to show/hide the entire terminal window, otherwise the app is completely hidden from the app switcher and the dock. This also involves handling macOS keyboard-to-app layout mapper not reacting to
23.
by crabique 2y ago
Somehow this is the first time I see anyone else bring this up, but the fonts are absolutely displayed with wrong kerning on my mac, for my font (at 12pt) I was able to make it look the same as iTerm2 with adjust-cell-{width,height} both se
24.
by crabique 2y ago
Unfortunately, it's nowhere near close feature-wise just yet: proper quake mode, search, prompt navigation, line timestamps, tab output indicators, forced keyboard locales, customizable toolbar with user-defined variables/indicato
25.
by crabique 2y ago
On my system it's ctrl+tab to cycle through tabs, then escape to open the one that is currently highlighted.
26.
by crabique 2y ago
How would one go about changing QoS for the system daemons and would it require disabling SIP? I don't see anything relevant in launchctl's man or launchd documentation, really interested to try it on the system VPN service.
27.
by crabique 2y ago
Restic is awesome for moderate operational scale, but when it's got to backup thousands of storage block devices with arbitrary number of files on them, it just doesn't really work. Is there anything cool people use for Ceph-RBD b
28.
by crabique 2y ago
How does one spin up a mirror of the entire WordPress.org registry, not to mention keeping up with plugin/theme updates that are uploaded there by the respective maintainers? Furthermore, does WordPress even support custom resource reg
29.
by crabique 2y ago
Biggest showstopper for me personally is Make's inability to properly pass through arguments from `make run <arbitrary number and type of arguments>` to the underlying program. Some of the issues could be avoided by requiring a -
30.
by crabique 2y ago
Upd: searching in the github mirror by the commit hash from the issue, found that https://github.com/gcc-mirror/gcc/commit/1e3312a25a7b34d6e3f... is in fact in the 'releases/gcc-14.1.0' tag. Ev

More ›