HNHacker News
TopNewBestAskShowJobs

dusanh

120 karma · joined February 4, 2019

https://dhaustein.github.io/
submissionscomments
dusanh··on The Mega-Rich Are Turning Their Mansions into Impenetrable Fortresses

    When a thing seals itself against its own destruction, it merely dies a different death.
https://en.wikiquote.org/wiki/Planescape:_Torment#Coaxmetal
dusanh··on Docker Was Too Slow, So We Replaced It: Nix in Production [video]
Building VMs?
dusanh··on GitHub is no longer independent at Microsoft after CEO resignation
I can map most of the list but I can't recall what would be the "review environment setup" What did you mean by that?
dusanh··on Why Exercise Is a Miracle Drug
Any recommendations on a rowing machine?
dusanh··on Engineer creates ad block for the real world with augmented reality glasses
Came into this thread looking for a mention of Steve Mann! Man was ahead of his time. More on his 'Visual Filter' and more here http://www.wearcam.org/ieeecomputer/r2025.htm
dusanh··on Bare metal printf – C standard library without OS
This sounds fascinating and absolutely alien to me, a Python dev. Any good books or other sources to learn more you can recommend?
dusanh··on Show HN: LinkedIn sucks, so I built a better one
I apologize this is not directly related to OP, but if you, like myself, get mad at all the "Suggested" posts LinkedIn is pushing on you, you can use the following ublock filter to get rid of these posts:

    www.linkedin.com##:xpath(//span[text()="Suggested"]//ancestor::div/div[contains(@data-id, "activity")])
Combined with carefully managing who I actually follow, it made it for a much more pleasant experience.
dusanh··on Why Senior Engineers Should Stay ICs
> whereas managers are seen as useful in different domains, giving them practical mobility

And this is exactly my problem with becoming a manager. You become fungible, easily replaceable, movable and fire-able.

dusanh··on Docker Compose Isn't Enough
I worked for a medium size company that served, and still is, ~150 clients (some Fortune 500 included) by deploying prod with docker-compose. It can be done.
dusanh··on Identifying factors contributing to "bad days" for software developers
> the QA env was not actually setup to mirror the production env

As senior QA, this alone is going to end me one day.

dusanh··on Ask HN: How do you share and sync .env files and secrets with your team
> Is the ansible vault password in the repo too?

No no, this is one of those secrets we share among the team and save to KeePass or whatever.

dusanh··on Ask HN: How do you share and sync .env files and secrets with your team
We use Fernet[1] or Ansible vault[2] with the encrypted secrets committed to the code repositories, but I guess we can do that because the code is not public.

The rest we share over a secure, company approved, channel, and save them into local KeePass-es (KeePassXC)

[1] https://docs.ansible.com/ansible/latest/vault_guide/index.ht...

[2] https://cryptography.io/en/latest/fernet/

dusanh··on Why You Should Learn Linux (As a Developer)
There is also Red Hat and SUSE. And I am pretty sure smaller companies like that exist too. I started my career in just one like that!
dusanh··on Ask HN: What books should I read to improve as a software engineer?
The already mentioned The Pragmatic Programmer, 20th Anniversary Edition is so far the best I have read. It's not overly specific to one single thing, it tries to teaches general principles and good practice.[1]

I also have a personal recommendation for when you want to better understand testing, QA, or want to/have to work with QA people. [2]

[1] https://pragprog.com/titles/tpp20/the-pragmatic-programmer-2... [2] https://www.amazon.com/Lessons-Learned-Software-Testing-Cont...

dusanh··on The Coffee Machine Hiring Test
Trying to service, or even just open up, any appliance at a workplace is against the Occupational Safety and Health regulations in my country.
dusanh··on Job Application should sound like a ransom note/threat
This has to be satire, right?
dusanh··on Optimizing Linux for an AMD Xiaomi/Framework Laptop
Can you share your nixos config?
dusanh··on IBM Granite: A Family of Open Foundation Models for Code Intelligence
Thank you again! This is definitely something to start from!
dusanh··on IBM Granite: A Family of Open Foundation Models for Code Intelligence
Thank you so much! That sounds surprisingly straightforward. I expected a lot more fiddling to get going.

Where would I start if I wanted to use a model programmatically ? Like let's say I am building a chat bot. I have a large data set of replies I want the model to mimic, and I'd want to do this in Python. Of course, I'd probably use a different model than Granite.

dusanh··on IBM Granite: A Family of Open Foundation Models for Code Intelligence
I'm a complete newb when it comes to AI, and I am getting pretty ashamed of it too. How do I take a model like this and use it in my day to day? Can I somehow use in, say, VSCode? How do I point it at my code base, and use it to help me write new code?
dusanh··on Ask HN: Who is hiring? (May 2024)
Sorry, should have been more clear, I meant other EU citizens working exclusively remotely.
dusanh··on Ask HN: Who is hiring? (May 2024)
Hi, are applicants from elsewhere in the EU considered?
dusanh··on Proxmox VE: Import Wizard for Migrating VMware ESXi VMs
Replying to my own comment for posterity. I was able to figure it out!

In the LXC, I created a new non-root user and then set it's uid and git to a LOWER number than what every tutorial about rootless Podman recommends (devel being my non-root user here):

  # cat /etc/subuid /etc/subgid
  devel:10000:5000
  devel:10000:5000
Then I also had to edit configuration for the LXC itself on the Proxmox host to allow tun and have it created on container boot:

   # cat /etc/pve/lxc/{lxc_vmid}.conf
   ...truncated...
   lxc.cgroup2.devices.allow: c 10:200 rwm
   lxc.mount.entry: /dev/net dev/net none bind,create=dir
Note: I have no idea why a lower number of ids works...
dusanh··on Proxmox VE: Import Wizard for Migrating VMware ESXi VMs
Was there anything extra you have done on the Host itself?
dusanh··on Proxmox VE: Import Wizard for Migrating VMware ESXi VMs
That actually did not do anything different for me. I did the following:

1) Created a new LXC.

2) As root, I created a new user "devel"

3) For the "devel" user set both subuid and subgid to devel:100000:65536

4) As root, installed podman

5) In another SSH session, logged in as "devel" and ran "podman version"

Same error as before. This is in a Debian 12 LXC running on Proxmox.

dusanh··on Proxmox VE: Import Wizard for Migrating VMware ESXi VMs
Thank you, this made me realize I assigned a wrong (too little) number for uids. It did not fix my issue however. I still see

  (dev) $ podman info
  ERRO[0000] running `/usr/bin/newuidmap 3427 0 1000 1 1 100000 65536`: newuidmap: open of uid_map failed: Permission denied
  Error: cannot set up namespace using "/usr/bin/newuidmap": exit status 1
I tried a solution I found on Red Hat's Customer Portal:

  (root) # setcap cap_setuid+ep /usr/bin/newuidmap
  (root) # setcap cap_setgid+ep /usr/bin/newgidmap
Also did not work. I can run

  (root) # podman info 
just fine as root. This leads me to believe there are some other problems with my non-root user permissions.

EDIT: It probably makes little sense, to run rootless on top of an already unprivileged LXC. I just wanted to give vscode server it's own non-root user in there. Oh well...

dusanh··on Proxmox VE: Import Wizard for Migrating VMware ESXi VMs
Unprivileged LXCs? Interesting, I thought containers would require privileged LXC. At least, that it my takeaway from trying to run Podman in a nesting enabled, but unprivileged LXC under non-root user. I kept running into

> newuidmap: write to uid_map failed: Operation not permitted

I tried googling it, tried some of the solutions, but reached the conclusion that it's happening because the LXC is not privileged.

dusanh··on Show HN: Dropflow, a CSS layout engine for node or <canvas>
We did use this approach years back when I worked for on a feature that generated PDF invoices.

But I wondered whether using instead something like LaTeX wouldn't be faster and easier to scale.

dusanh··on Home Lab Beginners guide
Any good tutorials for dummies like me?
dusanh··on How to keep engineers out of meeting hell
Or someone gets the short end, like me a European, who has to be on meetings with the US in the late afternoon. I do have the mornings free of meetings, so that's nice at least.
Page 1 of 2Next →