gbN025tt2Z1E2E4

Joined 5 years ago

Karma
50
Submissions
51
Member since
Aug 10
View on Hacker News

Recent submissions

Comment · 2 years ago
We see it differently. Exodus is useful in this capacity as much as any other, similar base os image or not for preventing overwriting.
Comment · 2 years ago
Comment · 2 years ago
COPY --from=ugit-ops /usr/lib/libpcre* /usr/lib/

COPY --from=ugit-ops /usr/lib/libreadline* /usr/lib/

COPY --from=ugit-ops /lib/libc.musl-* /lib/

COPY --from=ugit-ops /lib/ld-musl-* /lib/

No, what I'm saying is you're blanket copying fully different versions of common library files into operating system lib folders as shown above, possibly breaking OS lib symlinks and/or wholly overwriting OS lib files themselves in the process for _current_ versions used in Alpine OS if they exist now or in the future, potentially destroying OS lib dependencies, and also overwriting the ones possibly included in the future by Alpine OS itself to get your statically copied versions of the various CLI tools your shell script needs to work. The same goes for copying bash, tr, git, and other binaries to OS bin folders. No No NO!

That is _insanely_ shortsighted. There's a safe way to do that and then there is the way you did it. If you want to learn to do it right and are deadset against static binary versions of those tools for the sake of file size, look at how Exodus does it so that they don't destroy OS bin folders and library dependency files in the process of making a binary able to be moved from one OS to another.

Exodus: https://github.com/intoli/exodus

This is why I'm saying your resulting docker image is incredibly fragile and something I would never depend on long-term as it's almost guaranteed to crash and burn as Alpine OS upgrades OS bins and lib dependency files in the future. That it works now in this version is an aberration at best and in reality, there probably are things that are broken in Alpine OS that you aren't even aware of because you may not be using the functionality you broke yet.

OS package managers handle dependencies for a reason.

Comment · 2 years ago
I can appreciate the work to shrink the image, but copying the various standardized CLI tools and related library files into the image versus installing them with APK can introduce _many_ compatibility challenges down the road as new base Alpine versions are released which can be difficult to detect if they don't immediately generate total build errors. Using static binary versions of the various CLI tools would be a better approach here, which inevitably means larger base binaries to begin with, again ballooning the docker image size... all for a minimal gain of 14MB overall is not worth it for a production build unless you're working in the most minimal of minimal embedded OS environments, which the inclusion of FZF -and- findutils would already seem to negate since there is so much duplication in functionality between the two tools already.

Overall this approach results in an image so fragile I would never use the resulting product in a high-priority production environment or even just my local dev environment as I want to code in it, not have to fix numerous compatibility issues in my tools all over 14MB of space.

Comment · 2 years ago
Tons of them, why? Lots of QNAP apps are written in python, django, and use sqlite.
Comment · 2 years ago
Fantastic to see this project... hopefully they'll remove all the enterprise cloud and MDM related requirements for using various browser policies (MetricsReportingEnabled,EnterpriseRealTimeUrlCheckMode, etc) along with a re-enabling a few policies that were annoyingly deprecated like the NTP related settings, HomepageIsNewTabPage, HomepageLocation, and easier side-loading of local extensions sources.
Comment · 2 years ago
This seems like it takes something simple and makes it much more complicated with the aim of making it simple and then fails on all counts. For example, how is this different/better than simply using version controlled docker-compose files instead of flat single image dockerfiles?

This is adding yet another abstraction layer on top of docker which is already a convoluted space with numerous options available. Additionally, the "Balanced control between App Devs and Operators" tagline makes me wonder how "operators" would have a better awareness of how a deployment should operate versus the developers themselves. The developers should be creating their solutions based on previously defined security constraints and compliance requirements, so what "balanced control" is being shifted around here?

Comment · 3 years ago
Twitter will be fine. The only people going to threads are virtue-signaling losers that won't be missed anyway.
Comment · 3 years ago
Sad to see your company going away. Your boxes were great for hosting Plex servers.

Grats on the sale either way.

Comment · 3 years ago
That's a shame, I was hoping YouTube was going to go all-in with their ad blocker bans at the same time since I would have been hit by that too. The amount of time I've gotten back from no longer wasting time reading tweets since I refuse to create a Twitter account has been absolutely wonderful. I'm looking forward to ditching all the wasted time on YouTube soon as well. These companies don't have a clue.
Comment · 3 years ago
> "The once-secret program — created after the 9/11 attacks and described by intelligence officials as crucial to stopping overseas hackers, spy services and terrorists — has long faced resistance by Democrats concerned that it could trample on Americans’ civil liberties."

I guess that's why the Democrat Obama opened up access to all NSA raw sigint data to every other federal law enforcement agency (all 16 of 'em) before leaving office. His final f you to American citizens as president (officially). Because he was soooooo concerned about trampling on citizen civil liberties... Right.

Give me a break... the article is obviously a leftist hit piece against the right.

Comment · 3 years ago
In my experience, a lot of millenials that constantly talk about traveling and how it "fulfills" them are generally trying to replace that empty feeling not having kids has left them with. It's a biological imperative, after all. The one constant you typically hear from people with kids: "i'm exactly where i should be in the world."
Comment · 3 years ago
Good looking out, I was going to cancel the other day and losing access to all my audiobook content WAS the impression I got, which caused me to hesitate. After reading your comment, I've gone and cancelled and yep, still have access to all my stuff. Fuck dark pattern bullshit.
Comment · 3 years ago
Agreed, though I combine using Little Snitch with Radio Silence: https://radiosilenceapp.com

Little Snitch is great for when I want hyper granular control of a specific app's network permissions while Radio Silence gives me a super quick way to just block EVERYTHING for a particular app right away without even opening it the first time.

Comment · 3 years ago
That's fine, so just make it a right-click menu service item versus automatically enabling it globally for every image across the entire OS by default for everyone. I know lots of security folks who find it useful storing malware code as an image for reference since that was relatively safe to keep around since it couldn't be accidentally executed and/or being flagged by anti-virus apps. Suddenly macOS was reading that code and introducing a whole new avenue for security vulnerabilities.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton