Honestly, the amount of regressions, packaging problems, hacky fixes, non-stardard configuration and poorly set defaults in Ubuntu is disgusting, look at how bad NetworkManager was / is on it, it's not that bad on Fedora (not that I like it that much) and the whole debarcle with them doing Unitiy on top of Gnome rather than contributing to the community projects, or recently when they released an update that broke all USB 2 ports and if you got that update before they pulled ita and rebooted - you had no keyboard or mouse to work with, their own custom (IMO very gross) init system of Upstart when they could have contributed to System which they're now going to move to anyway, their dodgy partnerships with companies like Amazon where they're putting apps / links on the desktop menus to Amazon (who does very little for the open source community also), it's just a joke and I really wish people would just move on to better distros or at least use pure Debian if they can handle the lack of packages. So often at work when devs complain their DNS isn't working or they can't connect to the VPN or they updated and now their machine doesn't boot - our first questions - 'are you running Ubuntu?' it's like the Windows of the linux world I swear.
It was indeed a massive, not well discussed change and the kernel maintainers should have vocalised it better (not that I think the Ubuntu maintainers wouldn't understand it properly anyway TBQH) but yes, the behaviour was previously logically incorrect and had to be fixed at some point.
heh, try using Windows when it goes into swap, Windows both desktop and server additions have the worst memory management I've ever seen and having no ZRAM and a pig of a filesystem like NTFS really doesn't help either.
Going into swap in Linux isn't a problem, it's a symtom of a misconfigured / provisioned server or an unhanled application memory leak, other than that the other only things that should cause it is incorrectly configured use of shared / reserved memory.
Disk based swap should pretty much always be disabled these days and ZRAM used to incresed efficiency.
yes, we run ZRAM of every single server we have, its fantastic and we don't have swap anywhere. It's worth noting though that vm.swappiness is set to 0 then ZRAM wont be used, it must be set to 1 or higher unless you're using a really old kernel (pre 3.5).
Yeah it wasn't well announced when the change was made, esentially if you find any linud machines running any kernel dating way back to 3.5 make sure you change vm.swappiness=0 to vm.swappiness=1
Yeah I know right, Ubuntu breaks userspace all the time, Debian isn't quite as bad but it's much worse than it used to be thanks to so many missing packages, try building a cluster / HA system on it - you actually can't!
We run the latest mainline kernel on all our 200-300ish CentOS hosts after it's passed standard testing and is available in Elrepo: http://elrepo.org/tiki/kernel-ml
Back when we ran Debian everywhere I wrote a CI project that would build the latest mainline kernel, applying GRSec and adding some SELinux policies in as best I could (backported from CentOS/Fedora funnily enough) and build them into a Debian package for deployment across our hosts, see: https://github.com/sammcj/kernel-ci
SELinux is an absolute must in todays world, simply put it prevents applications and namespace from doing thing outide of their area of interet, for example a web server should never be allowed to execute files from /tmp so it prevents that, another great example is when you have any form of multi-tennancy - for example you might have several docker or LXC containerised apps running on a host SELinux will / can ensure that even if of those apps is compromised and someone popped a shell in it, they couldn't go beyond anything running in that namespace, i.e. to the host itself or other apps running in containers on the same host.
It prevents a lot of sitations where an app might behave badly, for example perhps you're running a PHP app and a 0-day PHP flaw is discovered, there's a good chance that SELinux restrictions could prevent that exploit from being useful to the attacker by not allowing the app to do unusual things.
We have a rule - if it's not running SELinux in enforicng then it's not going into production.
We use to run GRSec as well, however with modern kernels a lot of the GRSec code base has been merged in so it's often not required.
and a number of other useful community / product maintained repos such as PostgreSQL's official yum repo, ELRepo, Docker's official repo, Sernet's official Samba repo, Nginx's official repo etc...
Most SELinux policies, Corosync and Pacemaker and related HA / clustering tools, and a pile of other things and they settled for a really awful stable kernel major in Jessie / 8.x.
It really went downhill with, the release of 8.0, the only improvement we really saw was a slightly newer kernel (but still old) and SystemD (although not consistantly implemented), The Debian community has also fallen through the floor, lots of smart-ass bickering and slack package maintainership and generally unhelpful, rude contributors / owners. By contrast RHEL/CentOS sped up their release cycles after re-in-housing Fedora as and taking a lot of it's rolling updates into stable a lot quicker and the community has been fantastic, Redhat have really stepped up and modernised their game a lot over the past two or there years.
It's not just a bunch of people setting cm.swappieness to 0 is it? That behaviour changed and now prevents going into swap /ever/ where it used to mean go into swap as a last resort. Changing it to 1 fixes the issue and will act like the old behaviour or only swapping as a last result.
Regardless, it's things like this why we never recommend people use Ubuntu - years of poorly packaged and tested software. If you want a Debian based system use Debian (and accept that there's now a lot of missing packages are barely any proper SELinux or clustering support) or use RHEL/CentOS for a more complete district and add in repos like epel and elrepo as required.
I personally highly recommend 1Password, it's not free or open source - but it's very well written and designed software by a very responsible and trustworthy company with a good security track record.
I'm the same but I don't torrent and I'm using sickrage rather than sonarr just because I find mono so unreliable, but I hear sonarr is better at finding older series.
I'm so sick of 'designers' thinking they're programmers and smashing out some NodeJS or JavaScript heavy crap with no regards to performance or security. Elixir seems to attract some smart minds that think 'big picture' - obviously I'm generalising here and I'm not stating that this particular project is brilliant or anything but it is a trend I've observed.
Looks really interesting, I love goal 1: no JavaScript - YES! Thank you! And elixir is a very exciting language, especially to an ops person where when I read elixir code it actually makes sense to me and seems elegant. Ignoring my technical praise the objective of the product is solid, this is something I've been interested in for a while, I have a solution for usenet but not so much for torrents.
No I'm not, we use 'consumer grade' (which is kind of a bs marketing term if you do your homework to ensure you get a quality brand and model) ssds in our SANs, we run 960GB Sandisk Extreme Pros in our first Gen and Micron M600 or Crucial MX series in our second gen SANs, they perform great and we've had almost no failures over the past two years of hammering them. We do keep the firmware up to date which I think a lot of people are slack on. We tried some Samsung Pro SSDs in a POC and had major issues with their performance over time and several DOAs so we're lumping those in with other Samsung hardware quality and not going near them.
I used to live in and grew up in New Zealand, if you like the outdoors there's no where better in the world, it also has fantastic internet connectivity with commonly available fibre to the home and has had decent internet for years - when I moved to Australia 5 ½ years ago I was amazed - I went from 200Mbit down 80Mbit upload to 6mbit down and 0.5 upload in a brand new apartment, I had to move house twice before finally getting on to what they call(ed) the NBN which was fibre but limited to 100/20, and which has since been shitcanned back to copper by the recent anti-internet government. So if you want good internet, hiking, skiing and riding motorbikes New Zealand is great. But it has a high cost of living, low income and yes, the cities are small and get old fast, there's also a bad drinking culture and it's not awfully racially diverse. So there's ups and downs just like everywhere.
I don't use a backpack and after using this in the past I just wipe it clean after a meeting, nothing more annoying than when people leave writing on a whiteboard after a meeting!
I used to have a similar whiteboard stick on my old MacBook back in 2011 - it was really useful as long as I remembered to bring a whiteboard marker with me to meetings. It'd be nice to have an eink boogieboad like wrap instead but the problem with those it's it's erase all or nothing so, I'm sticking with ordering a new whiteboard wrap from here as they're so cheap.
This seems odd to me as now more than ever I see more and more people with MacBooks / iMacs and AppleTVs which have become 'the standard' where as in the past you'd see people with windows laptops or whatever and that'd be the norm it's now appearing to be quite rare (at least from what I've seen in Australia), I don't really know anyone that still uses a windows machine bar one friend who has a gaming rig but he only has it for the GPU and uses a MacBook for everything else other than that it's just a few of the older aged managers / project managers at work and everyone else really uses macOS or Linux of some form.
They've dropped enough that it's cheaper for us to purchase all 1TB SSDs to replace our 650GB 15K SAS disks in our SANs, after two years our drive failure rate has dropped by nearly 900% with a 5-40x performance gain depending on what you're measuring and the drives are about half the price of what the 15k SAS drives cost, to top it off our SANs used to run so hot you could barely touch the rear or the servers and now they're dead cold 24x7.
I don't think this website could be any more broken on a mobile device, none of the buttons work, everything seems out of scale and the video doesn't load.
Looks really lovely, would be great to see GitLab integration, I'm seeing a lot of people move from Github Enterprise to GitLab CE/EE which (IMO) is a lot better to work with.