xnyanta

8 ms·

1.
by xnyanta 1y ago
Just install using the "English (World)" locale.
2.
by xnyanta 1y ago
I have automated IPMI certificate rotation set-up through Let's Encrypt and ACME via the Redfish API. And this is on 15 year old gear running HP iLO4. There's no excuse for not automating things.
3.
by xnyanta 2y ago
I am happily using them for all of my domains they support. The problem with Cloudflare registrar is that they flat out don't support many domains/tlds.
4.
by xnyanta 2y ago
DoH will prevent government from hijacking your query in the first place. These blockades are only possible because of DNS being clear text and suceptible to MITM
5.
by xnyanta 2y ago
Speak for yourself but I'd rather have LPCM surround audio than deal with proprietary formats like Dolby Digital and DTS which are the only way to get surround without using eARC over HDMI. This has literally nothing to do with any kin
6.
by xnyanta 2y ago
>it's not that hard to run an audio cable back from the TV to an audio receiver Wait until you find out that many consumer sound bars (Sonos comes to mind) only support the latest and greatest digital audio formats over eARC.
7.
by xnyanta 2y ago
So true, I picked up the Samsung G80SD "Smart Monitor" and the deciding factor was literally just that it supports eARC, allowing me to use my Sonos Beam soundbar with my computer and supporting compressed audio formats like Dolby
8.
by xnyanta 2y ago
If you want your devices on your LAN to have publicly routable IP addresses, by definition they need to be GUA. I think you just mis-understand what end-to-end connectivity means. Your "WAN" is a small transit subnet between your
9.
by xnyanta 3y ago
Pretty sure nix-darwin + its homebrew integration could set up 99% of this with a pull of your configuration repo and a single installation command.
10.
by xnyanta 3y ago
Samsung Internet is a really good browser though, definitely my favorite on Android
11.
by xnyanta 3y ago
This was my immediate though while reading thr article. Why should the kubernetes authors be burdened by having to maintain an LTS release. That should be Red Hat's job, just like they do with RHEL.
12.
by xnyanta 3y ago
You definitely don't need to drain your nodes. I have never drained my nodes on my peronal cluster and just update and restart the control-plane components. The procedure is more of a cloud-ism where people don't upgrade their nod
13.
by xnyanta 3y ago
Super interesting read, definitely nostalgic. Are you planning to further expand gala's functionality to use a different exploit to gain persistence in the exploit chain for an untethered jailbreak?
14.
by xnyanta 3y ago
>norms More like it gets rid of band-aids
15.
by xnyanta 3y ago
I see this at work, being within such a customer. People driving these mandates barely understand IPv4, let alone know what IPv6 is. They're software developers after all, not CCIEs. There's nothing preventing you from having a pr
16.
by xnyanta 3y ago
Same thing for IPv6, but instead of assigning a new singular IPv6, you assign a new subnet with millions of IPv6 addresses.
17.
by xnyanta 3y ago
You can still use alternate front-ends to "shadowplay" like OBS replay buffer.
18.
by xnyanta 3y ago
Unfortunate, DSC works fine on apple silicon. I did notice displayport-related regressions on my old 2015 mac way before big sur though, Apple's track record is not great.
19.
by xnyanta 3y ago
Doesn't really change anything for the end-user that wants to access the website and is bummed that it doesn't work. There might be politics in the way but all they care is that it doesn't work.
20.
by xnyanta 3y ago
Continent-level information doesn't exist. EDNS Client Subnet doesn't send a location, it sends a subnet. Its "location" then has to be looked up in geolocation databases which may or may not be accurate. There's no
21.
by xnyanta 3y ago
macOS will render at the next highest integer scale factor and then downscale to fit the resolution of your monitor instead of just rendering at the fractional scale in the first place
22.
by xnyanta 3y ago
Had the same reaction as soon as I found out pyATS is a cisco-specific thing. I run very simple networks for events on shoestring hardware/budgets and built a simple wrapper around my own object model using python, jinja and napalm to
23.
by xnyanta 3y ago
This model is probably more common than you think, I don't see how anyone would be doing this any other way in a scalable fashion.
24.
by xnyanta 3y ago
> Wait, are you me? If you hadn't made that HN post I would probably still be scratching my head as to why I have intermittent DNS resolution issues in my personal Kubernetes cluster. I've been having them for years only for so
25.
by xnyanta 3y ago
I'm not sure what you mean by "non-trivial" but here's a simple discord bot I wrote in python, that I distribute as an OCI image and that is built with Nix for both x86_64 and aarch64 linux via GitHub actions: https:&#x
26.
by xnyanta 3y ago
As much as I agree with your reasoning, I have experienced this kind of breakage first-hand due to cloudflare and DNSSEC and will continue using DNS resolving code that doesn't cause me pain and suffering (anything that isn't musl
27.
by xnyanta 3y ago
Even so, I did a quick search on repology and Nix derivations with multiple outputs (the nix lingo analogous to the subpackages you mentioned) are counted as a single package. For example, bash has 5 outputs but only counts for 1 package in
28.
by xnyanta 3y ago
> OK: 9494 distinct packages available I opened that apkindex file and it had duplicate entries for a ton of packages with different versions, taking a look at https://github.com/wolfi-dev/os I only see about 840 ya
29.
by xnyanta 3y ago
I've attended a local CNCF meetup where the chainguard folks presented Wolfi and their related tools to create container images and SBOMs. I was already skeptical of the product, having heard of it before. Unfortunately, attending that
30.
by xnyanta 3y ago
Sounds to me like CVE scanners aren't doing a great job if they can't pick up a nodejs installation from the official nodejs image distribution. Just looking at package manager metadata effectively won't give you the full pic

More ›