nezirus

6 ms·

1.
by nezirus 10mo ago
I've used them professionally during 0.9 times (2008.) and it was already quite useful and very stable (all advertised features worked). 17 years looks pretty good to me, Proxmox will not go away (neither product or company)
2.
by nezirus 11mo ago
For some context, Passt is used by podman for rootless networking (by default from Podman 5.0) It is a noticable improvement for traffic heavy containers. https://github.com/containers/podman/blob/main/do
3.
by nezirus 1y ago
Maybe this could be useful to libraries like psycopg3 to use something more simple/natural instead of this: https://www.psycopg.org/psycopg3/docs/api/sql.html (while I also agree it gets crowded with yet
4.
by nezirus 2y ago
SuSE was my first Linux system and it helped a lot to spark my interest. Yast (software manager) and SaX (XFree86 configuration tool) were a Godsend for a noob like me in 199x. It's still solid today, and I hold it in high regards, eve
5.
by nezirus 2y ago
Podman beeing mostly compatible with docker was a wise choice. If you run rootless no way to break fw/network like docker can. With podman in mind, one ought to try buildah and skopeo. Again, buildah can run Dockerfiles, but you are no
6.
by nezirus 2y ago
Dunno, in new normal Germany, a refugee* from Palestine, seeking asylum from apartheid and maybe citizenship would first need to recognize the right of their occupator to exist. It is obviously much more important to fix sins from the past
7.
by nezirus 3y ago
Maybe shout out to HAProxy people, like many they've observed performance problems with OpenSSL 3.x series. But having good old OpenSSL with QUIC would be so convenient for distro packages etc https://github.com/haproxy
8.
by nezirus 3y ago
The cynical voice inside me says it works as intended. The purpose of k8s is not to help you run your business/project/whatever, but a way to ascend to DevOps Nirvana. That means never-ending cycle of upgrades for the purpose of u
9.
by nezirus 3y ago
So when I "sideload" HAProxy with my application, handling (incoming!) and outgoing http(s) and tcp connections, balanving, failover, logging and what not, that is cool now and I get to call it Ambassador Sandwich Pattern.
10.
by nezirus 3y ago
You coveniently ignore the events leading to and the reasons for sanctions and bombardment: https://en.m.wikipedia.org/wiki/NATO_bombing_of_Yugoslavia This was actually the second time NATO has bombarded serbian forces
11.
by nezirus 3y ago
It been long since I have stopped following grsecurity, but I would not be surprised if segment registers are still used (e.g. Pax UDEREF) https://forums.grsecurity.net/viewtopic.php?f=7&t=3046 https://pax.gr
12.
by nezirus 3y ago
You can use pasta mode for rootless https://docs.podman.io/en/latest/markdown/podman-run.1.html#...
13.
by nezirus 3y ago
Yeah, lets treat all "sides" equally, since they are all bad (sarcasm ends) Go to https://www.icty.org/ , read about cases, verdicts and pleas: https://www.icty.org/en/cases/key-figures-ca
14.
by nezirus 3y ago
Dunno about others, but I always ask myself where these companies would be if their software was under non free license from the start. This is hostile to end users, small people an companies, not just big megacorps wanting the "steal&
15.
by nezirus 3y ago
I am so pissed by this move, it is totally against the spirit of free software and GPL. Using additional contracts to subvert the free software licenses. You get to see the software, but you can't share it further. RedHat would not be
16.
by nezirus 3y ago
Interesting read. I'd like to know more about alpine problems (even just to confirm my bias against it, unless space savings are the most important thing). For me, Hetzner is mostly baremetal provider. They have dedicated RX line, and
17.
by nezirus 3y ago
Kafka doesn't do any stupid tricks, but uses the underlying platform for the full potential: https://kafka.apache.org/documentation/#linuxflush With the usual recommended settings, XFS filesystem, 3 replicas, 2 &q
18.
by nezirus 3y ago
Even simpler idea is just to disable turbo for "quiet" mode.
19.
by nezirus 4y ago
That is exactly the point, you should not use general string templating system for SQL queries, together with "roll your own" escape and validation mechanisms. I really don't see why they included that part, if not to show ho
20.
by nezirus 4y ago
That database stuff looks horrible. Why do they feel the need to introduce DB query templating into string templates? No matter what you do on the client side, the database engine itself should escape/validate the data. Didn't we
21.
by nezirus 4y ago
... on the third hand it's better not to roll your own list in any language ;-) Joking aside, some stuff are currently really hard in Rust, but the rate of change slowed down, and all I can see now is everyday ergonomic improvements, s
22.
by nezirus 4y ago
My experience with indexing is similar. Up to lets say 1M docs it works fine, but after that it goes south. Even with auto-batch I had to manually prepare large bulk updates and wait for completion during inserts to not overload MS. (I am u
23.
by nezirus 4y ago
You saved me from stating the same thing. As for the daily hot showers, they aren't good for your skin anyways. If I was living down there, I'd chose the interval approach, taking oportunistic showers to manage smell :-D
24.
by nezirus 4y ago
That is funny since poetry modus operandi is 'poetry run python ...' On topic, "Cargo for Python" should be official, singular (no competing standards), opinionated and fast (tm).
25.
by nezirus 4y ago
Reading this is really depressing. I just want Cargo for Python. Poetry it is for now, but it has quirks, and it is dog slow...
26.
by nezirus 4y ago
Better late than never :) FB people have great experience with introducing typing into weakly typed languages (e.g. PHP vs Hack). So I actually started using pyre-check in place of mypy. The tool is really great and fast. I also like pysa q
27.
by nezirus 4y ago
I can vouch for use of Pyright as LSP for neovim and helix. Very useful, especially the strict mode. I usually pair it with pyre, another great tool https://github.com/facebook/pyre-check
28.
by nezirus 4y ago
I would agree with the above, as an easier version of TLS fingerprinting. One could also ise nginx/haproxy to extract enough TLS info, and detect requests xoming through proxy Magic string: JA3 fingerprint
29.
by nezirus 4y ago
Dunno, but adding verified attribute with a setter which executes verification step looks simpler to me and covers 80% of the use cases.
30.
by nezirus 4y ago
For local (GUI!) tools I find XCA ( https://hohnstaedt.de/xca/ ) excellent. It has a few ready to fo templates out of the box, and you can make your own.

More ›