ryanjkirk

6 ms·

1.
by ryanjkirk 4y ago
You definitely shouldn't be storing logs on giant PVCs; they should be injested into a log aggregator.
2.
by ryanjkirk 4y ago
"For Basecamp, we take a somewhat different path. We are on record about our feelings about sharding. We prefer to use hardware to scale our databases as long as we can, in order to defer the complexity that is involved in partitioning
3.
by ryanjkirk 4y ago
You're half right. The "bre" e is pronounced like pen or bed, not bray.
4.
by ryanjkirk 4y ago
It's not.
5.
by ryanjkirk 4y ago
I'd be incredibly grateful if someone could break this down for me.
6.
by ryanjkirk 4y ago
Are you from 2018? Everyone running OpenShift is using CRI-O and that footprint is not small. We made the switch in our EKS and vanilla k8s clusters in 2021. Docker has now even made their API OCI-compliant in order to not be left behind. A
7.
by ryanjkirk 4y ago
Docker is heavier (and more dangerous) because of dockerd, the management and api daemon that runs as root. Actual process isolation is handled by cgroup controls which are already built into the kernel and have been for years. You can appl
8.
by ryanjkirk 4y ago
Up until recently, I was the steward of a large, distributed, and profitable app that used no containers. The infrastructure was managed with packages and puppet, and it worked well.
9.
by ryanjkirk 5y ago
Folders work perfectly in a pure hierarchical taxonomy. Many classifications defy this rigid of a structure, however. For example: Widget 1: it is A and B but not C, so tag it with A and B. Widget 2: it is A and B and C, so tag it A, B, and
10.
by ryanjkirk 5y ago
That would be a hard link, though they can't cross filesystem boundaries.
11.
by ryanjkirk 5y ago
Our current CloudFormation pipeline template is over 5,000 lines of yaml. That's probably on the high-end, but based on your statements, it sounds like you haven't seen a corporate cloud footprint.
12.
by ryanjkirk 5y ago
I worked at a company that had Target and other Fortune 500 retailers as clients, and we had very strict SLAs with financial penalties if we broke them. There was absolutely the possibility that we could have ended up our clients more than
13.
by ryanjkirk 5y ago
>cloud is no panacea That is the subtitle of this article I wrote last month - https://medium.com/@rykrk/everything-is-just-build-vs-buy-d7... I note that the grandparent's premise for a catastrophe is that eve
14.
by ryanjkirk 5y ago
Yes, TCO can be higher, depending where you are on the curve of capex, amortization, and staffing costs. Don't forget you still need at least Developers, DevOps, and Security. If you're inefficient at cloud, spinning up ec2s lef
15.
by ryanjkirk 5y ago
You're correct on staffing savings, but not on Ops savings. I delved into this pretty thoroughly last month - https://medium.com/@rykrk/everything-is-just-build-vs-buy-d7...
16.
by ryanjkirk 5y ago
PassBolt comes to mind.
17.
Everything Is Build vs. Buy, Even the Cloud(medium.com)
2 points by ryanjkirk 5y ago|0 comments
18.
by ryanjkirk 5y ago
> I guarantee you they are not. I'm speaking from firsthand knowledge. How embarrassing for you to think that because you know some Private Equity folks (generally the worst people at managing technology), that 100% of the rest of t
19.
by ryanjkirk 5y ago
Nobody is arguing that a startup needs a datacenter; that is a ridiculous straw man. I'm well aware of the costs, having managed multiple colos as well as multiple cloud footprints. I also know you can lease most hardware, if you prefe
20.
by ryanjkirk 5y ago
Again, you don't need to build an S3 replacement; you can deploy it onto k8s. This is the same skill set whether in a public or private cloud. Agree, I don't think anyone is buying SANs that don't need them. If you're sp
21.
by ryanjkirk 5y ago
Don't forget Minio for S3. I took your previous comment to be about on-prem cloud technology. It exists and does not need to be "cloned". If you were taking about staffing resources, we've pretty well established you&#x2
22.
by ryanjkirk 5y ago
> Most data center machines run at a tiny fraction of their capabilities; seeing a CPU running at 25% is definitely something that stands out. Are you familiar with VMware?
23.
by ryanjkirk 5y ago
> cloning No need to clone; all of this already exists. Take a look at CNCF.
24.
by ryanjkirk 5y ago
> who is going to pay for the person to patch it every week, or upgrade it to the latest version, or upgrade the SAN disk, or upgrade the hardware every 3 years, etc. etc. Let's take this a step further - who is going to hire these
25.
by ryanjkirk 5y ago
and XSAN <shudder/>
26.
by ryanjkirk 6y ago
Having not used setcap, would that also require the setuid bit to be set with ownership as root (like sudo)? And reside on a filesystem without the nosuid mount option?
27.
by ryanjkirk 6y ago
Setting this up makes much less sense than setting up a tested vpn, such as wireguard or open, or even a persistent ssh tunnel using autossh to your home rpi. I would never allow my prod systems to be potentially exposed by an api that runs
28.
by ryanjkirk 6y ago
also https://1.1.1.1/purge-cache/ for cloudfare.
29.
by ryanjkirk 14y ago
Doubtful. Seeing as they maintain their own Linux distribution, they would probably be maintaining their own BSD flavor instead.
30.
by ryanjkirk 14y ago
Quite the opposite. This isn't about the userland, it's about the kernel. The linux kernel is where the high-performance cluster computing advances have been. The GNU userland is just a clone of the BSD userland, nothing special there. More

More ›