rapidlua

6 ms·

1.
by rapidlua 9mo ago
For go specifically, I find ko-build handy. It builds on the host (leveraging go crosscompilation and taking advantage of caches) and outputs a Docker image.
2.
by rapidlua 11mo ago
> How to manage pointer+offset address integrity/legality inside the kernel (for instance) has a proof by examples a-plenty in the other code Let me provide some context here. These annotations aren’t there to help the compiler&#x2F
3.
by rapidlua 1y ago
Go build is fundamentally better? How so? Go build is so light on features that adding generated files to source control is a norm in go land.
4.
by rapidlua 1y ago
> Packages may not circularly reference each other. Actually possible with go:linkname.
5.
Failing Randomly: Linux Seccomp and Kernel Hacking(mejedi.dev)
9 points by rapidlua 2y ago|0 comments
6.
by rapidlua 2y ago
I do occasionally attempt to edit patch files produced by git-format-patch. Frequently I end up with corrupt patch. Still curious how to fix those numbers.
7.
by rapidlua 2y ago
Is it just me, or the piece doesn’t explain how to make edits without messing up the hunk?
8.
by rapidlua 2y ago
Re nuclear reactor: higher tier virtualization products work flawlessly. It is a shame what a garbage virtual box turned into over the years.
9.
by rapidlua 2y ago
It was fun to read, but it would’ve probably been easier to rely on seccomp filters instead.
10.
by rapidlua 2y ago
Hardly. For starters, wasm doesn’t guarantee that a piece of code terminates in bound time. There are further security guarantees in ebpf such as any lock acquired must be released.
11.
by rapidlua 3y ago
Great writeup, thoroughly enjoyed! The provided "lab" is especially appreciated. I'm curious if you had reasons to not use veth in noarp mode.
12.
by rapidlua 3y ago
Thank you for bpftrace! It was a vital aid for kernel spelunking. Very excited to see vmtest. I did a similar tool in the past [1] but never achieved this level of polish. [1] https://github.com/mejedi/vmwrap
13.
by rapidlua 4y ago
The BPF instrumentation is quite cool! I wonder if uprobes have a performance impact. Does it roughly compare to a single syscall? https://github.com/keyval-dev/opentelemetry-go-instrumentati...
14.
by rapidlua 4y ago
> Docker only uses namespaces and cgroups. How is that not isolation?
15.
by rapidlua 4y ago
There was an entry from one of the Chrome early developers on NH recently: https://neugierig.org/software/blog/2022/12/chrome.html > “Chrome 12 [an old version] was the best Chrome", but since I’
16.
by rapidlua 4y ago
Sorry, but I’m failing to see how rootless containers are relevant. Having multiple user accounts is a legit use case - think e.g. a shared device. A typical Linux package manager’s install is a privileged operation. Homebrew on the other
17.
by rapidlua 4y ago
Homebrew the package manager is quite popular but that doesn’t indicate that it is engineered well. For instance, it doesn’t work with multiple user accounts which is such a trivial thing!
18.
by rapidlua 4y ago
This is an impressive effort. I would love to see ignore rules for the particular editors and ideS added to project .gitignore files less frequently though. Which editor someone uses is a private matter. Don’t commit it to public repositori
19.
by rapidlua 4y ago
As of today, vector’s iterator is just a pointer. You need more than just a pointer to detect out of bounds accesses. It makes old binaries incompatible with new binaries. It also means that you can’t mix and match, it must be either a or b
20.
by rapidlua 4y ago
But c’mon there’s no such thing as safe brain surgery. Would you then market brain surgeries as unsafe?
21.
by rapidlua 4y ago
This is unfortunately ABI-altering, therefore it won’t be possible to selectively enable for projects that want it. It’s a distribution that has either to bite the bullet and say “we are going to pessimize all C++ software”, or err on the s
22.
by rapidlua 4y ago
This is mostly due to ease of distribution. The binary is self-contained, no need to ship anything but the binary itself. You can also compile locally and then run it elsewhere that is a completely different flavor of Linux. Quite handy whe
23.
On running untrusted code in AWS Lambda(github.com)
2 points by rapidlua 4y ago|0 comments
24.
by rapidlua 5y ago
This is fake. Sells at 105 right now. Edit: I have an account in a Russian bank and can purchase usd at this rate right now.
25.
by rapidlua 5y ago
I strongly suspect that the buffer size is largely irrelevant. The article linked from readme estimates the amount of syscalls needed with the default buffer size as 16K. That’s peanuts, can do it in under a second, considering just syscall
26.
by rapidlua 5y ago
Thank you for the feedback! A new calling convention could probably nail it for many use cases. Sometimes you want something very special though. E.g. LuaJIT pre-decodes instruction prior to dispatch to squeeze some work into branch mispred
27.
by rapidlua 5y ago
I’ve opened an issue in LLVM bugzilla concerning jump not being folded with address computation on x86 with a proposed fix. Would love if it gets some attention. https://bugs.llvm.org/show_bug.cgi?id=50042 Also been working
28.
by rapidlua 6y ago
Do openssl speed sha256 to get the idea how high the latency for a cache hit would be. I see a throughput of ~300MiB/sec. This can be parallelised easily but still we are burning lots of CPU cycles for nothing. Bad for battery life. h
29.
by rapidlua 6y ago
I wonder if they do indeed compute a checksum of the binary to come up with a aot-translation cache key. Must be quite ineffficient.
30.
by rapidlua 6y ago
FlameGraph [1] renders profiling results into svg. Profile is essentially hierarchical; a user can zoom into subtree by clicking an element. Probably not an inspiring use of script in svg; but boy, how handy this feature is! https:/&#

More ›