nicolast

7 ms·

1.
by nicolast 3y ago
Exactly: a non-blacklisted IP with good reputation, correct mailname and valid PTR record is the foundation, ideally augmented with SPF. I've been running an e-mail service without DKIM and DMARC for many years without any delivery iss
2.
The Different CTO Roles(allthingsdistributed.com)
1 points by nicolast 3y ago|0 comments
3.
Cardinal/WASM: In-Browser Modular Synth Based on VCV Rack(cardinal.kx.studio)
68 points by nicolast 3y ago|30 comments
4.
Bespoke Synth, an open-source modular DAW(bespokesynth.com)
4 points by nicolast 3y ago|0 comments
5.
Surge XT: Free and Open Source Hybrid Synthesizer(surge-synthesizer.github.io)
3 points by nicolast 3y ago|0 comments
6.
by nicolast 3y ago
I am indeed. Feel free to reach out, would be happy to learn from the approach you took.
7.
by nicolast 3y ago
You may be interested in https://discourse.haskell.org/t/towards-an-actor-framework-f... , then!
8.
SPJ: What I love about the Haskell community(discourse.haskell.org)
2 points by nicolast 4y ago|0 comments
9.
by nicolast 4y ago
For this kind of decisions, why not simply keep notes as comments in the code? These can easily be added later, even 14+ years after the code was written. Then, when someone dives into the codebase to figure out why something was done this
10.
by nicolast 5y ago
GoPro would like a word.
11.
The Lonely Work of Moderating Hacker News (2019)(newyorker.com)
292 points by nicolast 5y ago|245 comments
12.
by nicolast 5y ago
There's also 'AX_APPEND_COMPILE_FLAGS' [1] (and its dependency 'AX_CHECK_COMPILE_FLAG' [2]), next to many other (related or unrelated) macros in the autoconf archive. [1] https://www.gnu.org/software
13.
Beyond Block and File: COSI Enables Object Storage in Kubernetes(thenewstack.io)
9 points by nicolast 5y ago|0 comments
14.
by nicolast 6y ago
An 'easy' way to deploy a cluster could be using kubeadm. Then you'll need a CNI like Calico to get Pod networking up-and-running. However, you'll want to install a bunch of other software on said cluster to monitor it,
15.
by nicolast 6y ago
> first of all with k3s keeping a production cluster running is still pretty easy. Fair enough. I'll admit I have no direct experience with K3s. There are, however, many K8s deployment systems out there which I would not consider &#
16.
by nicolast 6y ago
My comment above did not come out of the blue, but based on real-world experience ;-) You may be interested in our MetalK8s project [1] which seems related to yours. [1] https://github.com/scality/metalk8s
17.
by nicolast 6y ago
> Getting Kubernetes up and running isn't really the issue anymore, that's pretty easy to do. The tricky part is long term maintenance and storage. This times 100. Deploying basic clusters is easy. Keeping a test/dev-clust
18.
by nicolast 6y ago
> How to distribute secrets if not by env? (which I agree! Honest question) You'll want to use BuildKit (`docker buildx`), see https://docs.docker.com/develop/develop-images/build_enhance... [edit] My bad,
19.
by nicolast 6y ago
Not an Arrow expert at all, so I may be missing something, but I fail to understand the "The Science of Reading/Writing Data" section, or rather, its relevance to the article (and Arrow). From what I could find, Arrow support
20.
by nicolast 7y ago
Not all services exposed to the outside are HTTP(S).
21.
How to Write Shared Libraries (2011) [pdf](akkadia.org)
53 points by nicolast 7y ago|1 comments
22.
by nicolast 7y ago
Cases like this seem to confirm the approach LetsEncrypt took of only issuing certificates of a somewhat-short lifetime, which kind-of forces a user to fully automate the handling of certificates (monitoring expiration, taking measures to r
23.
by nicolast 8y ago
There's https://github.com/openstack/ansible-hardening and https://github.com/dev-sec/ansible-os-hardening
24.
by nicolast 8y ago
> If you verify that your hardware is unstable, how can you expect the software not to fail and corrupt data? No such thing as 'stable hardware' at scale.
25.
by nicolast 8y ago
I'm not involved in the Phippy 'project' in any way (only got a copy of the books and some plastic version of the animals as a speaker here at KubeCon :-D). I agree the wording may be a bit 'off' and providing a det
26.
by nicolast 8y ago
You assume it's meant to explain K8s to kids, or teach adults about it. I don't believe it's either, more of a gimmick for the existing Kubernetes community. If an adult (or a kid, for that matter) wants to really learn about
27.
by nicolast 8y ago
'secrets are base64 encoded at rest' means exactly what it says: a secret value is encoded using base64 in the Secret object 'document' that's stored in etcd. It doesn't say anything about at-rest encryption ,
28.
by nicolast 8y ago
I'm aware it doesn't use iptables, except to implement network policies, hence the reference. Good call about the bridge usage, my bad, makes sense that's not being used given Calico is L3...
29.
by nicolast 8y ago
Exactly.
30.
by nicolast 8y ago
As mentioned here, the article doesn't specify whether the Calico setup uses ipip or not which could have a measurable impact. In the Calico-without-ipip case, you're basically comparing host networking (let's assume with som

More ›