nullify88

Wouldn't this bash script be just as susceptible to supply chain attacks? What dependencies does openssl, cURL, sed, grep, awk, mktemp pull in, and could it be vulnerable to attack like we saw with xz?

With that rationale, why not use https://github.com/go-acme/lego which is a self contained lets encrypt client in Go?

The operator pattern and custom resources allows me to extend the kubernetes API to cover certificates, backups, encrypted secrets, and more in a consistent centralised way.

I preferred to start with an empty cluster and to add in the functionality needed.

I tried k3s but wasn't happy with its resource utilisation. I settled on k0s with integrated etcd, and the crun container runtime. Additionally k0s deployments can managed with k0sctl and yaml.

I run a single intel n100 node running Fedora Core. Initially it was a lot of tinkering with IaC / yaml but once I had a working setup, I spend most of the time merging PRs from renovate from my phones GitHub app that keeps the software updated.

Some supporting benchmarks.

https://www.scitepress.org/Papers/2020/93404/93404.pdf

https://programming-group.com/assets/pdf/papers/2023_Lightwe...

I know, I'll probably get some flack but I love running Kubernetes at home. A combination of Flux, github and actions, and renovate makes it very easy to maintain.

You are right that cilium is a CNI but one of its many features is also providing a sidecar-less service mesh using eBPF. https://cilium.io/use-cases/service-mesh/

Maintaining something like that is a pain unless you have tooling like Renovate to inform and update the digests and versions.

Alternatively, If you don't fancy patching your own cables you can get female to female RJ45 keystone jacks which use plugged / crimped cables. The longer cable run is plugged in behind the patch panel, and a shorter cable in front to keep your cabinet or rack clean.

WAF shouldn't be the only line of defence. It's just another layer in the security onion.

Couldn't you accomplish that with tracing? You may not even need any changes in your application as eBPF maybe able to automatically instrument the application. Alternatively, If you use Cilium as a CNI, this functionality can come out the box. https://docs.cilium.io/en/latest/observability/visibility/

A big thing here is that Superset and most of the other BI tools can connect directly to databases which is commonly the source of truth or data warehouse in some businesses. Secondly, Elastic have focused on other operational areas such as security, observability, and indexing / search. Kibana can do some dashboarding on those areas and its UI is nice, but Superset and similar tooling are more suited for BI purposes.

I worked there too. Good to see the Sun Cafe is still open for a banging English breakfast. I think Whitecross St markets is still on probably too.

I used to live above the Almeida Theatre offices on Upper Street. I loved living there. Many visits to Screen on the Green, Islington Chapel, and the various bars and restaurants there. Unfortunately it was also not far from gang violence from the Islington estates that often spilled in to the busy main streets.

One that left an impression with me was leaving a tooth in a cup of Coke and watching the tooth decay over multiple days.

I've used Call Recorder from f-droid but success will vary across phone manufacturers.

Max Payne is part of the Remedy Connected Universe together with Alan Wake, and Control

Isn't the typical behaviour of an application to re-establish the persistent connection on demand? I wonder what the requirement is to have these persistent with no timeout.

Yep that tini. The docker image is about 1.90mb. It's a repack of https://homer-demo.netlify.app/ I pre-gzipped a few of the compressible file extensions too so they can be served compressed.

In this case, I didn't need alpine. I generally aim to get the image as minimal as possible without too much hassle. I end up doing stuff like this alot when I feel like a community image maybe too bloated when something like alpine or distroless can be used. Entry point scripts have all kinds of envars and a shell dependency, I'd rather rebuild the image to cater for my needs and execute the binary directly, and mount in any config via k8s.

I've recently needed to build a docker image to run a static site. I compiled busybox with only it's httpd server. It runs with 300kb of ram with a scratch image and tini.

I didn't compile in fastcgi support in to my build, but it can be enabled.

How did you come to that conclusion? I always believed a reload spawned new workers and let the old one drain off.

Somewhat related, there was a John Oliver segment regarding raids which you maybe (depending on geoblocking) able to watch in full on YT: https://youtu.be/WYdi1bL6s10

This could easily be an anime.

Redis is also a requirement to run Argo CD. When comparing load on my home server, flux was much lighter. Flux also has a pretty cool terraform controller too.

At work though, we use Argo and our developers use its gui to get an overview on their applications.

This is the case for many "hybrid" smart watches including the parents Fossil Machine. I believe the true feature is the display of distance travelled on the watch reported by the phone and app.

Have a look at Withings. My HR Sport watch lasts just over a month on a single charge. I'm also satisfied with the application experience on Android.

I'm surprised to see not many mentions of Withings here. Perhaps it's more popular in Europe.

Withings

Withings watches offer a similar battery life, it really depends on how much the watch vibrates when notifications are routed to the watch.

I love my Withings. Given what I've read about the Fossil application experience, I assume Withings is better in that regard too.

I was lucky enough to catch him in 2011 at the Roundhouse in London. It's an audio visual experience. https://youtu.be/WWSf4NypDs0?si=EawZgfpzFAw16ZZK

I did not know his music was used on Cartoon Network, I watched a lot of that back in the day.

Spliter Cell: Chaos Theory introduced me to Amon Tobin. Top Gear also heavily played Amon Tobin when showcasing cars, until the BBC had enough of Jeremy Clarkson. Whoever picked the music for the show was a big fan.

AFAIK there were 4 suicides related to this scandal. Where did you get 40 from?