willsher

5 ms·

1.
by willsher 4y ago
Whether software based access control is sufficient depends on the workload and where in the stack the workload runs. I agree though, hardware virtualisation based is more secure and less complex. It also requires access to bare metal, so
2.
by willsher 4y ago
They are, or should be, entirely self contained such that whatever segregation is employed - be it hardware via a VM or in kernel with apparmor or SELinux provides sufficient segregation for the work load. V8s problem is JavaScript and NPM
3.
by willsher 4y ago
There is a value that transcends money. Value to society as a whole. Sure people need to live and have basic needs met, but to transcend finance is perhaps a necessity. One can make do with a lot less when the soul is enriched, when we take
4.
by willsher 4y ago
Humanities - history, geography, politics, religion and partially are economics, are our legacy; what we are and therefore what we can become. They are arts not sciences. Oral and written tradition for generations before technology & sc
5.
by willsher 10y ago
It seems the nature of this and VR that they come to boom for a while and then bust, having stagnated. They then wait for the next alignment of underpinning technology, knowledge and culture to emerge again. Last last one I'm aware of
6.
by willsher 10y ago
My understanding from my Solaris days was that CPU load is the number of processes queued for CPU time over the given period. It doesn't related to usage directly at all. (Other than higher cpu speed and io through out leads to a redu
7.
by willsher 10y ago
I though of seven. Is there any significance to the number one Kubernetes?
8.
by willsher 10y ago
That's part of the point of doing it to me. They can, hopefully, use the data in a useful way. Sure, they may make it private and paid for the data set they have, but I also have a copy of the data I can upload to other more publicly m
9.
by willsher 11y ago
There are still a few gotchas on the low level stuff, especially networking, but also other areas that involve kernel drivers more directly. The security around the containers still isn't as good as a hardware VM, but I think hardware
10.
by willsher 11y ago
From research around the Internet, D3 is generally seen as safe ( http://www.mayoclinic.org/drugs-supplements/vitamin-d/safety... is pretty typical on the safety information) Personally I take a D3 supplement of 20
11.
by willsher 11y ago
Config management, as it currently stands with Puppet/Chef etc./ ideally has no place _in_ containers iff the issue of how applications are deployed there can be solved in a suitably generic and straight forward way. A container b
12.
by willsher 11y ago
That's a fair point, but the alternative of always compiling the packages at the point in time negates that, at the risk of regressions and other 'new version' bugs, but that may be endemic in this anyway - if the author of t
13.
by willsher 11y ago
Which version of X library can be introspected via which binary is linked, rather than which package is installed - inspecting the actuality rather that an meta-data wrapper in the form of a package may be preferable. As for static vs dynam
14.
by willsher 11y ago
There is also pkgsrc, which from memory can be build to be separate from the underlaying OS. FreeBSD's ports is similar. Slackware's packaging is based off simple tar files. It does seem that this software build/deploy is a k