HNHacker News
TopNewBestAskShowJobs

nullify88

904 karma · joined July 25, 2017

submissionscomments
nullify88··on The drive stats of Backblaze storage pods
This is correct. Details about it's usage of encryption is here: https://restic.readthedocs.io/en/v0.4.0/Design/#keys-encrypt...
nullify88··on The drive stats of Backblaze storage pods
Another fan of B2 here. I do the same instead using k8up to backup my k8s PVCs to B2. K8up uses restic in the background.
nullify88··on Security Issue: Cloud Site Manager presented me your consoles, not mine
I believe the controller can be configured to be accessible via the cloud UI, but it isn't the default. At least thats the behaviour when configured with a local user.
nullify88··on The worst thing about Jenkins is that it works (2019)
In my experience, Xdebug absolutely made sense in production just not enabled by default for all requests. A lot of its functionality can be enabled via a cookie for a single session, and its made debugging production much easier as well as identifying bottlenecks in code or production infrastructure.
nullify88··on Migrating to OpenTelemetry
We've migrated away from the prometheus exporter to the prometheus remote write exporter as I'd like a completely "push" based architecture. Ideally I would have liked to be completely otlp but can't for the reasons already explained. So I use promethus remote write instead in to Mimir.

The transform processor could be useful if they ever deprecate the resource_to_telemetry_conversion flag, but its still a pain point because it hinders a developers autonomy, and requires a whitelist of labels to be maintained on the collectors by another team.

nullify88··on Migrating to OpenTelemetry
Thanks, that's nice to know VM can accommodate that. A migration will be something we will have consider if Mimir and OpenTelemetry force us to use joins for all our queries.

They maybe trying to address label cardinality but their approach seems like they are throwing the baby out with the bath water. The developer experience suffers as a result because from a dev pov, resource attributes are added to the metric yet this relationship isn't transferred when translated to Prometheus metrics.

nullify88··on Migrating to OpenTelemetry
One thing that's slightly off putting about OpenTelemetry is how resource attributes don't get included as prometheus labels for metrics, instead they are on an info metric which requires a join to enrich the metric you are interested in.

Luckily the prometheus exporters have a switch to enable this behaviour, but there's talk of removing this functionality because it breaks the spec. If you were to use the OpenTelemetry protocol in to something like Mimir, you don't have the option of enabling that behaviour unless you use prometheus remote write.

Our developers aren't a fan of that.

https://opentelemetry.io/docs/specs/otel/compatibility/prome...

nullify88··on Alan Wake 2 is an unexpected visual marvel even on older GPUs
Controls art direction is beautiful and it's atmosphere really unsettling. It's a unique game. I'm in love with mostly every game Remedy develops.
nullify88··on Is the Intel N100 a better option than high-end ARM RK3588 boards at the moment?
You are right, but that also means a bigger Micro ATX form factor too.
nullify88··on Is the Intel N100 a better option than high-end ARM RK3588 boards at the moment?
I have the Asus Prime N100I-D4 and picked it over the Asrock as I didnt want to deal with a powerbrick. I've stuffed the mobo in a 1u case with a modular 300w flexatx psu

Otherwise they are very similar boards.

Also thank you for reminding me of clear linux.

nullify88··on ArgoCon – Vendor-neutral Argo-focused Event
At dayjob we run ArgoCD, at home I prefer to run Flux which is much lighter for my home lab.

No GUI, redis, dex, and the various controllers and servers. Flux is very simple and is able to suite my needs.

nullify88··on ArgoCon – Vendor-neutral Argo-focused Event
You can use ApplicationSets which templates Applications based upon "generators" such as the contents of a git repo. You can add allowed destinations and resource whitelists and blacklists. https://argo-cd.readthedocs.io/en/stable/operator-manual/app... Once something like this is setup then developers do not need access to the argocd name space and can simply deploy to the git repo.
nullify88··on K3s – Lightweight Kubernetes
Kine (https://github.com/k3s-io/kine) is a shim or an external process (when not k3s) that translates the etcd api to enable compatibility with a database or alternative data store. Kubernetes natively talks etcd, so this translation is what enables its usage with sqlite or another database, but it incurs an overhead.

I don't have specific numbers unfortunately since it was years ago I benchmarked Kine against etcd. But I had a better results with etcd both in cluster and single node.

I happened to stumble upon this paper that echos my experience. https://programming-group.com/assets/pdf/papers/2023_Lightwe... Particularly, the high controller cpu usage (even for an empty cluster), and higher latencies.

nullify88··on K3s – Lightweight Kubernetes
Is it actually smaller though? For those non etcd data stores, Kine is often the component doing an etcd to database translation. Im my experience using it generated a load that was greater than a one node etcd instance.
nullify88··on K3s – Lightweight Kubernetes
What you've listed for k3s is mostly included in k0s. I wouldnt go far to say k0s isnt convenient.

* A helm controller is included in k0s

* Etcd is bundled and bootstrapped automatically which I perfer because I dont want the overhead of the translation that Kine does. Although Kine is available for a non-etcd datastore if that is preferred.

* Upgrade controller is included (autopilot).

* They have a local storage provider based on OpenEBS.

* Ingress is missing, but due to the built in helm controller that can be boot strapped upon cluster initialisation.

Overall, together with k0sctl and its declarative configuration it is easier to deploy k0s than it was k3s.

nullify88··on K3s – Lightweight Kubernetes
If you want something lighter than k3s, k0s could be worth a try. I recently switched to k0s and noticed the controller, and the various kube processes consume less cpu resources compared to when I was running k3s.
nullify88··on Zimaboard: The closest thing to my dream home server setup
While slightly bigger than those mini desktops, Asus and Asrock have recently released Intel N100 ITX motherboards. I have the Asus variant in a 1u short depth case and since theres no fan, its silent and capable of running some self hosted stuff at ease.
nullify88··on CISA, NSA, FBI Release Advisory Warning of BlackTech, PRC-Linked Cyber Activity
They have a default configuration applied when they are first powered on after a reset which includes wan, lan and nat setup. Possibly some basic firewall setup though I cant recall.
nullify88··on CloudNativePG – Postgres Operator for Kubernetes
We're using the Zalando operator. We have our wals and base backups shipped to Azure Storage Blob. Not sure where this S3 only thing comes from. Can you exllain further?
nullify88··on Fake town built exclusively for filming TV and movies
Getting Americas Army tingles reading about MOUNT training. Used to play it heavily back in the days
nullify88··on My Pebble mood tracker app from 2016
Similarly, I'd also suggest the Withings watches. I love mine. My battery lasts about a month but that also depends on how active its smart aspects are (like vibrating, the display, sport activities, etc).
nullify88··on Reasons to Drop Docker for Podman
Recently switched back to Docker Desktop from Podman Desktop since Docker Desktop seems to integrate better with Windows.

Good progress though and I'll revisit it again soon.

nullify88··on Musl 1.2.4 adds TCP DNS fallback
Doesn't distroless bring in a lot of complexity when you need something as simple as ca-certificates?

IMO Distroless or even scratch is nice for statically complied binaries or self contained deployments, but if there's a dependency on user space then it becomes complex.

nullify88··on VyOS From Scratch – Edition 1 (set up your own router)
isc-dhcp is EOL. I'd suggest using kea-dhcp from the same ISC. I believe there could be a script or some kind of migration path from isc-dhcp to Kea. I've been using Kea in production with no problems.

https://www.isc.org/blogs/isc-dhcp-eol/

nullify88··on What Happened to Dolphin on Steam?
Parents comment was only asking why would someone launch dolphin via steam and commented on it being bloat. We weren't talking about distribution because as you pointed out, it has little to do with launching dolphin as a non steam app.
nullify88··on What Happened to Dolphin on Steam?
I'm not a user of Dolphin, but an obvious reason is to utilise Steams Big Picture mode as a way to run various emulators. This also opens the possibility of playing over In Home streaming if you have a steam link.

Some setups can be elaborate with Roms listed in Steam / Big Picture with box art, fan art, and various metadata. Software like Steam Rom Manager assist with this.

Considering console emulation is often played with controllers perhaps infront of TV, Steams launcher is probably more suitable for launching emulation than using a keyboard or mouse for a start menu.

nullify88··on Xenia: Xbox 360 Emulator (2022)
I don't understand why contracts don't include provisions that allow Microsoft or other console manufacturers to emulate or have the game run on future consoles. Surely it'd be in the publishers interest to keep the game alive?
nullify88··on Xenia: Xbox 360 Emulator (2022)
If I remember correctly it was Mr. Mister - Broken Wings used in the intro sequence?
nullify88··on PCSX2 is an open source PS2 Emulator
This is a great 6 hour video that explains the complete Metal Gear timeline. From the old MSX games to the final game.

https://www.youtube.com/watch?v=CRnrSlL-Oug

Grab some popcorn because its a hell of a ride.

nullify88··on AMC Says More Than 20k Have Booked 'Barbie'-'Oppenheimer' Double Features
I'm not convinced the new MI will flop. A lot of hype has been built around the movie which has been continually delayed due to covid and scheduling, during which they trickle previews and exclusive trailers on YouTube. Previous MI films and Top Gun have also been refreshing in the age of CGI movies. Everyone is excited for it.
← PreviousPage 6 of 14Next →