HNHacker News
TopNewBestAskShowJobs

JustinGarrison

879 karma · joined March 5, 2011

justingarrison.com

justin@linux.com

submissionscomments
JustinGarrison··on wrtK8s [video]
My new homelab build with Linksys cases.
JustinGarrison··on Clusters become personal (like PCs did)
I'm actually confused about what ClusterdOS is and does besides glue a bunch of projects together in an opinionated way.

It sits on top of Kubernetes and seems very hand wavy about how you create and manage those clusters.

JustinGarrison··on Clusters become personal (like PCs did)
How does the IncusOS API compare to Talos? When I first looked at it it seemed very minimal and I didn't see a lot of options for more complex installs (eg network bonding, disk partitioning).
JustinGarrison··on The State of Immutable Linux
Thanks! I didn't know about Arkane. Ill check it out.
JustinGarrison··on The State of Immutable Linux
I work at Sidero, but I'm glad that wasn't obvious from the article because I'm trying to be fair.

I heard about Impermanence right after I gave the talk so I'm looking into it.

JustinGarrison··on What has Docker become?
I was early container adopter at a large RHEL shop and they absolutely required us to use their forked version of docker for the daemon and RHEL based images with systemd.

This was mostly so containers could register with systems manager and count against our allowed systems.

We ignored them because it was so bad and buggy. This is when I switched to CoreOS for containerized workloads.

JustinGarrison··on IBM completes acquisition of HashiCorp
I'm the head of product at Sidero. Thanks for sharing! We love to hear people being successful with Talos.
JustinGarrison··on 21 More AWS Services They Should Cancel
Everything trends upwards. Even the services they killed in the past year I’m sure were getting new customers. But Amazon isn’t interested and doesn’t have capacity to support hundreds of services that don’t make a lot of money.
JustinGarrison··on 21 More AWS Services They Should Cancel
It was a business decision because slack's old /call command was built on a startup they aquired. I don't know the details but I'm sure Amazon gets deep discounts on slack and slack get's the same for chime.

https://slack.com/blog/news/slack-aws-drive-development-agil...

JustinGarrison··on 21 More AWS Services They Should Cancel
I would be fine if they built a new tool with 2024 IaC experience and control. But I think trying to evolve CFN into a new thing would take far too long and have a lot of edge cases that they should just start over and stop trying to paper over it with CDK, Proton, ACK, etc.
JustinGarrison··on 21 More AWS Services They Should Cancel
You just saved me 1-2 hours trying to replicate the problem tonight. You earned an internet cookie Thank you for being a good internet citizen.
JustinGarrison··on 21 More AWS Services They Should Cancel
Thank you very much for the note. I use hugo to render the site and don't have any specific setting for back button behavior. I'll check it out.
JustinGarrison··on 21 More AWS Services They Should Cancel
EB has languished for 1 reason. The team that built/maintained EB was reorged to build AppRunner (as EB v2) and they never had enough cycles to maintain both and weren't allowed to deprecate v1.
JustinGarrison··on 21 More AWS Services They Should Cancel
Any amount of evolving would require a lot of breaking changes to rearchitect and not be bogged down by keeping compatibility. I think they should make a v2 and sunset v1 and not keep any old compatibility.
JustinGarrison··on 21 More AWS Services They Should Cancel
If you get rid of chime you also get rid of slack huddles (built on Chime). Like many AWS services the backend of Chime is good, the UX/UI is terrible.
JustinGarrison··on 21 More AWS Services They Should Cancel
In the last year they've deprecated 14+ services/features and they've been really bad. They will email existing customers but they won't announce it publicly to avoid the bad press. Documentation pages are updated quietly with banners or removed.
JustinGarrison··on 21 More AWS Services They Should Cancel
What services would you get rid of?
JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
FWIW Talos has DoD users from multiple countries. The areas that need a lot of security have repeatedly chosen Talos when they compare it to traditional Linux distros.
JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
Compliance and security are extremely important. Because of Talos’ single purpose nature and extreme small size it hasn’t needed patches for the recent “big” CVEs (xz utils, SSH, etc) because we don’t even have that software present.

When you get sick of patching let us know

JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
I’ll be doing a live stream setting it up on raspberry pi 4b tomorrow

https://www.youtube.com/live/HsY8D9aO84Y?si=VL5LPG_M9GwfM7d_

Talos doesn’t support older models (too slow) or the 5 yet (waiting for uboot support)

JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
Thanks for the interest in Talos Linux! I work at Sidero (creators of Talos) and there are lots of “secure, immutable, and minimal” Linux distos out there.

Something that Talos does differently is everything is an API. Machine configuration, upgrades, debugging…it’s all APIs. This helps with maintaining systems way beyond the usual cloud-init and systemd wrappers in other “minimal” distros.

The second big change is Talos Linux is only designed for Kubernetes. It’s not a generic Linux kernel+container runtime. The init system was designed to run the kubelet and publish an API that feels like a Kubernetes native component.

This drastically reduces the Linux knowledge required to run, scale, and maintain a complex system like Kubernetes.

I’ve been doing a set of live streams called Talos Linux install fest walking new users through setting up their first cluster on Talos. Each install is in a new environment so please check it out.

https://www.youtube.com/siderolabs/streams

JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
Talos is for the host installation where the kubelet runs, not as a base OS for the base container image
JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
You can include them and download an image from our image builder factory.talos.dev

They’re even shareable images. Eg here’s the image with gvisor included https://factory.talos.dev/?arch=amd64&cmdline-set=true&exten...

JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
90MB is the size of the kernel, our init binary (written in go), the 12 binaries we include by default, and various required config files and drivers https://www.siderolabs.com/blog/there-are-only-12-binaries-i...
JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
K8s binaries are downloaded separately. Specifically they’re downloaded and run inside containers on the host.
JustinGarrison··on Talos: Secure, immutable, and minimal Linux OS for running Kubernetes
Thanks for the feedback and happy to hear you like Talos!
JustinGarrison··on Show HN: 'justinstall' from any GitHub repo, file URL or local url
Looks like it has similar goals to bin which I highly recommend for binary installs from GitHub.

https://github.com/marcosnils/bin

JustinGarrison··on Show HN: I made a circuit board to explain EV tech [video]
That’s a really cool idea I don’t know how any of those systems work and not sure I will ever need to but I love what you’ve built for other people to learn it in a safe and cheaper way
JustinGarrison··on Show HN: A Vulkan-Video-based game streaming tool for Linux
Thanks for clarification how it compares. I've used Steam, Moonlight, and wolf with varying degrees of success.

I don't game very often, but I almost never do it from my desktop. I've been interested in low latency, GPU enabled remote desktop clients too. Happy to help test tvOS or iPadOS clients when you have something in test flight.

JustinGarrison··on Show HN: A Vulkan-Video-based game streaming tool for Linux
Would the Swift UI also work on an iPad? Do you have any comparisons with other tools (eg steam streaming, moonlight)
Page 1 of 6Next →