HNHacker News
TopNewBestAskShowJobs

chucky_z

1,215 karma · joined June 16, 2015

[ my public key: https://keybase.io/chuckyz; my proof: https://keybase.io/chuckyz/sigs/TE7_P8BlEovO4suPMF-Ul1FrCWsehSIgTOp-NxZbW9g ]
submissionscomments
chucky_z··on Net Positive
Is this anything more than a box with some text in it and a bunch of graphics? I can't see anything else on the entire page. This is somewhat insulting to how weird (in a fun way) the early web was to me.
chucky_z··on Asking nicely for root command execution and getting it
timthumb?
chucky_z··on LinkedIn CEO Ryan Roslansky decides to allow employees to work remotely for good
In some areas yeah they are. I’ve interviewed a few folks who are tremendously unhappy though where as previously it seems like they had one of the most content and happy workforces in tech.
chucky_z··on LinkedIn CEO Ryan Roslansky decides to allow employees to work remotely for good
Same reason GitHub is bleeding employees. (Microsoft acquisition causing forced changes at the current lifecycle of the companies)
chucky_z··on Introducing the PineNote
This blog post just got me so excited. I've seen what Pine started with and now in my head I just keep thinking "keep going keep going!!" This is hopefully the kick in the pants the tech giants need, a small company slowly eating up even a tiny percentage of their sales and doing it with cheaper and completely open (and arguably better?) products.

I am mostly all-in on Apples ecosystem because I've been so continuously disappointed by the fragmentation on the Android ecosystem, and this is something that's seriously giving me a real hit of excitement!

chucky_z··on Employers bow to tech workers in hottest job market since the dot-com era
Currently at a medium-large company. I’ve saved the company 10 years worth of my salary in the first 6 months of my position and continue to make decisions to multiply spending power on things like research.

I also try to make damn well sure everything we use is contributed too financially and we open source as much as possible.

chucky_z··on Mitchell Hashimoto takes on a new individual contributor role at HashiCorp
It fills another weird niche which is where Kubernetes can't scale _enough,_ especially in large hybrid environments.

We have several thousand hosts in a single cluster across Windows/Linux, all hooked up to Nomad/Consul/Vault and it takes some effort but our team isn't that big and we manage it. With the most recent releases of Nomad and Consul they truly shine at both ends of the spectrum, small/simple and extremely large/extremely complex.

chucky_z··on How Databases handle 10M devices in high-cardinality benchmarks
what you do instead is have an extra metric entirely per device. it's easier to have 1000 extra metrics than an extra label worth of cardinality on 1,000,000 metrics for every single update.

within prom:

  cpu{hostname,metadata,cpu_socket} 5.0
  cpu{hostname,metadata,cpu_socket} 6.0
  cpu{hostname,metadata,cpu_socket} 5.0
  cpu{hostname,metadata,cpu_socket} 4.0
  version{hostname,version_number} 1.0
instead of baking version_number in everywhere. just as an example, then you can know "oh, hostname has version number" on a chart, or even do some inversions and say "count of version number" to find stragglers.
chucky_z··on Valve is making a Switch-like portable gaming PC
The most recent update for Counter-Strike is honestly really great. It's a difficult game to touch as the community is in a pretty good spot meta game wise. I'd love for them to shake things up faster and more frequently, but as a spectator it's a super competitive game and I love watching it.
chucky_z··on Poor in Tech
I’ve been extremely lucky moving to the Bay Area to be someone who has not failed. I grew up poor. Today, I have enough money for rent and bills, I still think and worry about them. The endless what if’s are a lifetime long curse, and there is no cure.
chucky_z··on HashiCorp Nomad 1.1 Beta
We cycle north of a million containers a day through all our Nomad clusters. Scales, functions, breaks, and is repairable all in predictable ways. The same is true for Vault and Consul.

Also if you run Windows, Nomad is your absolute best choice. I understand k8s work on Windows, however I don't know a single individual running Windows containers.

chucky_z··on Pulumi 3.0
cdktf the cli is all js iirc, this is because the underlying library (jsii) is all js.
chucky_z··on Pulumi 3.0
afaict the aws terraform module tends to have 100% coverage. i've never found a resource that didn't work, or didn't already have some way to use. i was able to deploy eks when it was still in beta through terraform, while i think the cloudformation stuff for eks lagged behind like almost by a year.
chucky_z··on Ask HN: What was the biggest leadership challenge of your career?
I'm in it right now. I thought I've been doing a good job and suddenly I'm being attacked from all angles. I'm having someone help me, but it honestly even feels like they're attacking me. The hardest part is that it feels like i'm being forced to let go of my compassion and empathy for others in order to succeed.
chucky_z··on Yamauchi No.10 Family Office
Try Outer Wilds (not Outer Worlds). There's a lot of games that are more vehicles of storytelling rather than what is a traditional videogames.
chucky_z··on Apache Mesos to be moved to Attic
There’s a Singularity driver for Nomad

https://www.nomadproject.io/docs/drivers/external/singularit...

Nomad is pretty darn easy to run and scales far. I help run about 20 clusters in day job from 100 to 1800 nodes, we’re going to push one of them to over 8500 nodes here soon too.

We don’t use the Singularity driver but we wrote two of our own and they work well and are easy to maintain.

chucky_z··on RIP Flynn.io
If everyone truly understands their thin and tall slice, please keep those people they are worth their weight in gold. If anything, it sounds like you have an SRE organization right now, and could use some extra developers and operators. :)
chucky_z··on RIP Flynn.io
I'd take the alternate view. K8s is a huge relief from both development and operations, but it absolutely requires an entire team of dedicated folks along with re-tooling everything to fit it's paradigm. This is true of all orchestration systems, but especially true for k8s. If you have a dozen eng teams and 50 microservices, and 2 or 3 devops/SRE people because it's all in AWS/GCP/Azure, k8s is going to crash and burn. If you have a dozen eng teams with 2+ devops/SRE folks in each of them, and a handful of extra folks to form a whole new team for K8s you're in great shape.
chucky_z··on Running Nomad for a Home Server
I agree with a lot of the points you make.

Have you looked into nomad, consul and vault; along with everything they provide?

chucky_z··on Running Nomad for a Home Server
Let me try to do some quick mapping...

> load balancer provider

consul connect handles this, how you get traffic to the ingresses is still DIY... kinda. you can also use consul catalog + traefik (I've actually put in some PRs myself to make traefik work with a really huge consul catalog so you can scale it to fronting thousands of services at once). there's also fabio. you can also get bgp ip injection with consul via https://github.com/mayuresh82/gocast run as a system job to get traffic to any LB (or any workload) if that's an option.

i've also ran haproxy and openresty without any problems getting stuff from consul catalog via nomad's template stanza and just signaling them on catalog changes.

> storage provider

anything CSI that doesn't have a 100% reliance on k8s works. if you're also just running docker underneath you can use anything compatible with docker volumes, like Portworx.

> ingress controller

consul connect ingress! or traefik, both kinda serve double duty here.

> external DNS

no good story here -- with one exception, if by "external" you mean "in the same DC but not the same host," consul provides a full DNS interface that we get a lot of mileage out of.

if you're managing everything with terraform though there's no reason you can't tie tf applies to route53/ns1/dyn or anything else though!

> monitoring

open up consul/nomad's prometheus settings and schedule vmagent on each node as a system job to scrape and dump somewhere. :)

we also use/have used/will use telegraf in some situations -- victoriametrics outright accepts influx protocol so you can do telegraf/vector => victoriametrics if you want to do that instead.

> secret encryption

this is all vault. don't be afraid of vault! vault is probably hashicorp's best product and it seems heavy but it's really not.

there's a lot here that doesn't really compare at all, like the exec/raw_exec drivers. we use those today to run some exotic workloads that do really poorly in containers or that have special networking needs that can map into containers but require a lot of extra operational effort, e.g.: glb-director and haproxy running GUE tunnels.

something interesting about the above is i'm testing putting the above in the same network namespace, so you can have containerized and non-containerized workloads in the same network cgroup namespace so you can share local networking across different task runners.

chucky_z··on Why updating DNS is slow
I would imagine it does some kind of atomic swap, where it's just force updating an existing cache and not actually flushing it.
chucky_z··on Dissecting the Apple M1 GPU, Part II
Where did you get your knowledge? With places like HackerNews along with folks like yourself and myself writing posts about this kind of stuff it becomes trivial to walk down a rabbit hole for anyone of any age. Think back to how much you accomplished when you were younger because you were walking in the footsteps of others. :)
chucky_z··on After embracing remote work in 2020 companies face conflicts making it permanent
A good friend and co-worker of mine went remote several months ago, and no, he does not get healthcare anymore. I am not aware of what his full healthcare situation is but I cannot imagine it's cheap.
chucky_z··on Do You Love Me? [video]
In some of their older videos they have Diesel engines powering them, so they definitely have the capability to make some longer ranges. I was unable to find any articles but if you watch the older videos their engines are extremely loud. Definitely not fully electric.
chucky_z··on School of SRE: Curriculum for onboarding non-traditional hires and new grads
For LinkedIn that number can be 7+ figures saved per year by a single employee.
chucky_z··on Tech elites leaving San Francisco threaten Silicon Valley's supremacy
The company I work for did. I asked to edit the post to add my specific posting and they said it couldn't be done. It'll be there next month though!
chucky_z··on Tech elites leaving San Francisco threaten Silicon Valley's supremacy
This is legitimately what we're doing. We're bringing in really junior folks and spending years training/improving them. Unfortunately that doesn't help now. I thought it would be easier this year to hire due to COVID and layoffs, but it just hasn't been.
chucky_z··on Tech elites leaving San Francisco threaten Silicon Valley's supremacy
It's really unfortunate. Cloud allows rapid iteration, but doing a bit of self-hosting/colocation is such an insane cost savings that I think a lot of folks are really missing out on. I know at least 1 startup I worked at that would've had a more comfortable runway had they not went wholesale into AWS instead of playing it smart with hybrid. Paying a small team of folks even an astronomical salary to keep a small number of servers up 24/7 and use cloud where it makes sense (S3, elastic CI/CD with EC2) should still be saving some companies 6+ figures a month.
chucky_z··on Tech elites leaving San Francisco threaten Silicon Valley's supremacy
I agree with this. I cannot find talented and senior folks who fill the niche of my team (deep understanding of Linux systems, containers, and operating distributed systems). There seem to be a lot of SWEs in the world and very few SREs, let alone vanilla systems administrators for hire who are really good.

I think as an industry everyone is pushed towards software engineering and the large clouds have vacuumed up everyone worth their weight for operations. We make it happen but it’s so stressful because our team and workload balance is so far out of whack.

chucky_z··on Kubernetes is deprecating Docker runtime support
Nomad 1.0 is the bomb. I've ran Nomad since 0.7 and it was usable but pretty rough in those days. 1.0 is such a good, smooth thing. Super awesome even if you don't want to use Docker at all, you can just execute random stuff through exec/raw_exec, or straight Java. Heck, run it in a BSD homelab and use one of the jailshell executors.

It's not Kubernetes but it doesn't try to be at all.

← PreviousPage 6 of 16Next →