marksomnian
Joined 11 years ago
Karma
936
Submissions
309
Member since
Feb 3
DevOpsian and unsalvageable tinkerer.
View on Hacker NewsRecent submissions
Comment · 1 month ago
I like the concept and I'm trying to work out if it'll be useful for me, but I just cannot get past the cookie-cutter LLM style of the landing page. A Go library doesn't need a marketing page with a seemingly unrelated artwork and call-outs like "Climb from easy to nightmare →". Put a runnable example front and centre.
Comment · 3 months ago
To answer your question:
> Does Debian already provide signature on .deb files (that is, provide a manifest of their hashes and and sign each)?
Yes it does. If you look at https://ftp.debian.org/debian/dists/trixie/InRelease it's a PGP-signed file containing a list of files and their hashes. Each of those files (eg https://ftp.debian.org/debian/dists/trixie/main/binary-amd64...) then contains a list of .deb files along with their shasums. In other words, a Debian repo is a set of deb files, metadata files with their hashes, index files with hashes of the metadata files, and PGP signatures for the indexes, so the whole chain can be verified.
This means that anyone can set up a deb mirror by (essentially, there's some extra steps) copying that entire structure and the integrity is guaranteed because only the upstream admins can sign the metadata.
Comment · 3 months ago
That's exactly where I keep getting caught. I've looked at in-toto a number of times, and each time I've been left wondering "how is this better than a signed list of hashes?".
Which I suppose is what in-toto is at its core, but it's taken me a long time and lots of reading to get to that point, and I'm not seeing the advantages of it (except it being a standard, OK, fair enough).
I must be missing something.
Comment · 3 months ago
nginx (2004, ok, 22 years), ClickHouse (2016)
Comment · 3 months ago
That data is in fact made publicly available by Network Rail: https://wiki.openraildata.com/index.php/TD
though interpreting it isn't the easiest thing in the world...
Comment · 7 months ago
It's not that unusual to have an interim CEO hold the reins (read: sign anything that needs the CEO's signature) while a permanent one is found.
Comment · 9 months ago
In fact, uv's docs half-suggest this:
> With uv, it turns out that it's often faster to omit pre-built wheels from the cache (and instead re-download them from the registry on each run). On the other hand, caching wheels that are built from source tends to be worthwhile, since the wheel building process can be expensive, especially for extension modules.
https://docs.astral.sh/uv/concepts/cache/#caching-in-continu...
Comment · 10 months ago
In my experience, the remote shell weirdness is usually because the remote shell doesn’t recognise ghostty’s TERM=xterm-ghostty value. Fixed by either copying over a terminfo with it in, or setting TERM=xterm-256color before ssh’ing: https://ghostty.org/docs/help/terminfo
Comment · 10 months ago
Site appears to be hugged to death, repo is: https://github.com/angristan/MacThrottle
Comment · 10 months ago
Meta don’t use RSC: https://bsky.app/profile/en-js.bsky.social/post/3lmvwmr5rfs2...
> We are not using RSC at Meta yet, bc of limits of our packaging infra (it’s great at different things) and because Relay+GraphQL gives us many of the same benefits as RSCs. But we are fans and users of server driven UI and incrementally working toward RSC.
(as of April 2025)
Comment · 1 year ago
And `rails new` required me to install Ruby and Rails. I'm not sure what the point you're making is.
Comment · 1 year ago
GitLab too: https://gitlab.com/gitlab-org/gitlab