danvittegleo

10 ms·

1.
by danvittegleo 6mo ago
this is the first thing I list in the readme of the repo "For fun only. This is a proof-of-concept exploring what's possible..."
2.
Show HN: I built a distributed file store on top of AWS CloudShell
2 points by danvittegleo 6mo ago|2 comments
3.
by danvittegleo 1y ago
Absolutely - there are plenty of more cost-effective, cloud-agnostic ways to build something like this. This is just an experiment to explore Lambda networking and push it beyond its intended use cases.
4.
by danvittegleo 1y ago
Like most things with AWS, it’s tricky to pin down exactly - and it’ll probably cost more than you’d expect once you factor in Lambda invocations, GB-seconds of execution time, S3 request fees, and especially data‐transfer charges.
5.
by danvittegleo 1y ago
I did toy around with Tailscale initially trying to get it to spin up as an exit node but wasn't able to get that functional. I did manage to get Tailscale Funnel to work as the tunnel mechanism to Lambda, but unfortunately the perform
6.
Show HN: lambda-nat-proxy – Serverless proxy using Lambda and UDP NAT punching(github.com)
18 points by danvittegleo 1y ago|11 comments
7.
by danvittegleo 5y ago
It scales amazingly well with the number of cores you throw at it. Definitely the 3950x would work great.
8.
by danvittegleo 5y ago
I investigated EBS snapshot as an option, but there were two problems. 1) cost as i mentioned initially - for just AOSP source tree alone you are looking at > 250GB and at a cost of $0.05 per GB you are already at > $10/month and
9.
by danvittegleo 5y ago
In order to limit costs, everything is pulled from source on each build and there is nothing cached. This strategy takes advantage of the fact that AWS doesn't charge for ingress traffic and unfortunately puts additional load on Google
10.
by danvittegleo 5y ago
Yes, building AOSP requires a fairly powerful machine (at least to do it quickly): https://source.android.com/setup/build/requirements . It's definitely possible to do on a local machine with decent specs thou
11.
by danvittegleo 5y ago
With rattlesnakeos-stack, it uses spot instances and defaults to a c5.4xlarge which takes about 7-8 hours to build AOSP and Chromium (for an up to date webview) and equates to about ~$1 a build. I typically build on a c5.24xlarge instance w
12.
by danvittegleo 5y ago
CalyxOS is an awesome project. I have worked with the lead developer a bit over the past few years and it's been such a pleasure. We share some bits of code between our projects here: https://github.com/AOSPAlliance . I
13.
by danvittegleo 7y ago
Running it with pypy sped it up quite a bit and got it far enough to figure out the remaining portion of the URL.
14.
by danvittegleo 7y ago
For anyone interested in doing their own customizable builds of AOSP for Pixel devices check out: https://github.com/dan-v/rattlesnakeos-stack . This doesn't have any of the security hardening features of GrapheneO
15.
by danvittegleo 7y ago
Agreed. For anyone interested in doing their own monthly signed AOSP builds for Pixel phones with OTA updates, take a look at a project that I built that fully automates the process in AWS: https://github.com/dan-v/ratt
16.
by danvittegleo 8y ago
For those that prefer algo, there is an open issue to add Pi-Hole ( https://github.com/trailofbits/algo/issues/1258 ) and in my fork I've added Pi-Hole support: https://github.com/dan-v&#x2
17.
by danvittegleo 8y ago
Ha, you definitely have some years on me, but I can appreciate that perspective :)
18.
by danvittegleo 8y ago
If you are looking to maintain a secure device similar to stock Android without google services, a Pixel phone with verified boot using your own signing keys, latest AOSP, and up to date drivers/firmware is a far better option. I'
19.
by danvittegleo 8y ago
For sure. I'd love to have this script be able to run standalone as a local build process that would be portable across platforms and only run the AWS specific bits if you passed a flag for example. Anyways, happy to chat - you can sho
20.
by danvittegleo 8y ago
Right now if a spot instance terminates mid-build it doesn't attempt to save any progress. I do have an open item to at least alert users that this has happened though ( https://github.com/dan-v/rattlesnakeos-stack&
21.
by danvittegleo 8y ago
If you were looking to just do something similar but running on another platform, knowledge of Go isn't required. The core build process is a shell script, which just has some variables injected through Go templates: https:/&#x2F
22.
by danvittegleo 8y ago
I actually recently added a feature to search for the cheapest spot instance price across a number of different regions. Right now for example the cheapest price for the instance type used c5.4xlarge is ~$0.15/hour in us-east-2. This e
23.
by danvittegleo 8y ago
I made an alternative to CopperheadOS after it fell apart for those interested: https://github.com/dan-v/rattlesnakeos-stack . Rather than providing random binaries of an OS to install on your phone, I've gone the
24.
by danvittegleo 8y ago
I haven't spent much time looking at this part of the project as my phone isn't supported but it does look really neat. On my next phone upgrade I will probably investigate.
25.
by danvittegleo 8y ago
Agreed that if lower level hardware is compromised it doesn't matter what you run on top of it, and RattlesnakeOS doesn't protect from that other than keeping components up to date with latest security patches. I think if you are
26.
by danvittegleo 8y ago
That's a great question. I would say it is a bit limiting, and there are definitely some bumps in the road for the average user coming from stock Android. There are a lot of great open source applications in the F-Droid app store, but
27.
by danvittegleo 8y ago
Unfortunately there aren't very many phones that currently support verified boot ( https://source.android.com/security/verifiedboot/ ), which would be a requirement to be supported by this project.
28.
by danvittegleo 8y ago
Nexus 5x is end of life unfortunately, which means it won't get security updates from Google and therefore isn't a great fit for this project.
29.
by danvittegleo 8y ago
I like this idea and could definitely get behind something like this. The signing process is done after builds complete, so it might be possible. Although on Pixel and Pixel XL it is likely not possible as the kernel must be built with the
30.
by danvittegleo 8y ago
Thanks for the response! Unfortunately, I'm personally not interested in distributing binaries of the OS for public consumption, as I think installing an OS from a unknown person on the internet is probably not the best approach for a

More ›