140 karma · joined August 25, 2013
With the release of podman 4.6.0 a lot of the issues have been sorted out, podman-desktop is still shipping engine 4.5.1 at the moment, but a new release should be coming out soon. I'd suggest you give it another shot.
I understand that this thing is intended for development environments, but to be honest in 2014 with all the container awesomeness we're seeing recently, it doesn't make sense, and if the first thing I see in that script is "rm ~/.ssh/known_hosts" I can't be attracted to the project.
Edit: Grammar.
You should consider all servers running a vulnerable OpenSSL installation to be compromised. You'll need to rekey all your certificates.
Do not trust the fact that "the servers are internal" because if your perimeter has been breached you will most likely know only after the fact.
Personally, I tend to treat internal services with the same process I use for external services, they just come second on the list.
For anyone that might be looking for context: http://knowyourmeme.com/memes/events/c-plus-equality-c
The interesting thing is that they mention how many startup were registered but not how many of them survived their first year. Few friends of mine tried to stay in Italy and they're now struggling just to get some money home. Most of them had to go back living with their parents because none of these measures worked and are currently employed and with humongous debt with Equitalia (the italian IRS).
(sorry, i could not resist)
However forget about the second optional requirement. The way the SMTP works, means that at some point your email messages must be read and processed by the server, if you can't trust it, you already lost. The only way to be "safe" in that regard is to encrypt the payload with GPG as already suggested.
Furthermore, server-side encryption of your stored emails is indeed possible, but it will render impossible for the provider to offer basic functionalities like search in the web ui.
If you're really concerned about privacy issues and really want all your email encrypted you might be better off self hosting your own mail server, but be warned if you don't know what you're doing and you don't take proper care of it, you'll end up in a situation that is even worse than using something like gmail.
I'm lucky enough to live in an area that has sub-optimal cell reception, there is no 3g in a ~200 meter radius from my place, only 2g. It used to annoy me but then I got used to it and when I leave home I just let my mind wander and by the time I get 3g coverage again I'm too deep in my stream of thought to feel the need to check my phone.
That 20 minutes walk to the office each morning with myself is amazing, I can focus on the blockers I found the day before at work and more often than not, find solutions or at least work arounds, since it's essentially a distraction-free environment.
I'm a systems engineer, but I have to touch some Java code from time to time. I always have an hard time with the amount of indirection an average Java developer can reach. Luckily a few smart guys were hired recently and they have past experience in contributing to the JVM and their approach to the code is completely different and much, much more simple to understand, and since they came onboard the performance of critical parts of our main application increased dramatically with a few lines of code instead of the previous 400 or so.
Have Backbone; Disagree and Commit
Leaders are obligated to respectfully challenge decisions when they disagree,
even when doing so is uncomfortable or exhausting.
Leaders have conviction and are tenacious.
They do not compromise for the sake of social cohesion.
Once a decision is determined, they commit wholly.
When I'm interviewing I appreciate when the candidate challenges something I've said and provides information on why she/he doesn't agree with me. It really helps the candidate to showcase her/his knowledge and it helps me in probing his thought process, which is ultimately what I'm really interested in.
But I do tend to agree with his comment. Self hosting is never simple, it's one more thing you have to take care of. Yes there might be cases where self hosting something is a requirement but, personally, for all the things that are strictly not work related and things that "just have to work" (e.g.: email, im, code hosting for free time projects) I use third party services, unfortunately I don't have enough time to take care of those things, and since I have to take care of similar things at work, at least for my own spare time I want something that helps me focus on what I really want to do.
* And even then, you don't set the default ruby for the entire system, you set it for your own sessions.