nullify88

A container though should be immutable and ideally shouldn't have changes made to it. If the container were to die, it'd revert back to the old version? It looks to me like these seamless upgrades would be an anti pattern to containers.

With ingress you'd have a load balancer in front or have it routed in the network layer using BGP.

The systemv init script for nginx had an upgrade operation (in addition to start/stop/reload etc) which would send the signal. Worked like a charm.

I've used Island to put all work applications on to a work profile to keep it seperate from the main / personal profile. I wonder if Teams still could interfere with the dialer then or when the work profile is inactive.

Really happy with the CRS-305 and its value for money.

Release candidates for 7.1 had container support which opens worlds of possibilities for the switch. But unfortunately was removed for the final version pending updates.

Edit: Container support was introduced in rc3 and removed in rc5.

> There is no attack surface for any kernel - the only thing there would be a bug in mms. Please share your source for kernel attacks, on any android version

This is after one hasty search. https://source.android.com/security/bulletin/2016-10-01

There are various kernel level vulnerabilities listed. Some weakening privacy over tcp connections, others locally exploitable via a malicious app such as Pegasus.

I don't understand why you call him confused. Perhaps you can approach with curiosity instead.

> Additionally, you need to pin your DBs ("statefulset workloads") to certain Nodes based on the AZs since a block storage like an EBS cannot really be attached from Zone 1 to Zone 2 automatically.

Having Postgres replicate the data across AZs or run Ceph on top of EBS to do it at the storage level are options. The complexity of setup is made simpler by running their respective operators.

I'd agree, it isnt good for exploratory queries. But if you have some predefined ES queries for correlating log messages to metrics it can be useful to have it all in one dashboard.

Kodi core is actually C++. Its plugins are written in Python.

I believe its slow because theres a lot of legacy code in there since the Xbmc days which, had they had the resources, would probably have been rewritten.

How much valerian did you take? I often drink Celestial Sleepytime Extra, that contains 25mg in each teabag.

I think that particular age group takes those kinda questions less seriously than the older age groups.

Punching my external USRobotics 56k modem sure did make me feel a bit better during disconnects and internet troubles when I was younger and in the middle of a good CTF-Face map.

I'm waiting for when they switch the button positions and I agree to the new terms accidentally due to muscle memory.

You may need to modify the routing table so Linux can route traffic destined for a particular network down the interface of your chosing.

I haven't worked with wireguard and it may already have this feature built in, but the fundamentals remain the same.

Edit: Perhaps its "AllowedIPs" in the connection config.

WSL2 can automount the Windows host in to the folder of your choosing. In my case its /mnt/c for the C:\. I often cross the filesystem boundary.

Going the other way, WSL exposes a SMB share so you can browse the Linux filesystem. This would be via //wsl$

I've uninstalled Docker Desktop and installed podman in WSL2. So far I haven't had a problem.

Granted not everyone can do this if they have a dependency on the Docker ecosystem, but as someone who just used Docker desktop to run and build containers on the cli or via Ansible, podman is nearly a drop in replacement. As a bonus, theres no docker bridge IP conflict I need to worry about.

Edit: Alternatively, this also looks comprehensive: https://dev.to/bowmanjd/install-docker-on-windows-wsl-withou...

So what you are saying is that the overcall cost of doing business with tmobile (both monetary and your personal data being public) justifies the convenience?

Because DNS based adblocking goes further than ads blocked in the browser. Its also effective in mobile apps, and other devices such as Smart TVs where it is not possible to have uBlock do the filtering.

I agree its effectiveness is wearing down as ads are served via the first party domain, but it still does make a difference.

When querying the chromecast for now playing media when using Spotify Connect, the response contains spotify album art urls. I haven't verified whether its the same as directly querying the spotify api but at first glance the images weren't as big as I'd like them to be.

I'd also like a variety of artist images as a backdrop which is hit and miss.

Thanks for the suggestion though.

Anyone know of a API to fetch high quality music artist and album art? I've been meaning to make something which sniffs whats playing on my Chromecast and display it on a screen but I've had difficulty finding a good source of art.

Thank you for the suggestions :)

A lot of people like myself just want to view logs and dont care for features like SIEM. This is where the OSS and OpenDistro versions shine.

I have revisited Loki after all this new though, but I think its still missing full text search.

Theres a long list of features we don't use. We primarily use Grafana for our dashboarding needs.

If I had to make a short list. Data streams, index lifecycle management and security on top of the OSS distribution of ES is all I need to view and manage K8S pod logs.

Worth noting that the developers of searchguard which the Opensearch / Opendistro security plugin is based on is also being sued by Elastic.

I dont think repo activity is an accurate representation since its been less than a year since Elastic made their license changes and Opensearch was shortly announced in January 2021.

Give em some time to grow.

My Samsung S10 has an option to "enable lockdown mode" in the power menu which disables notifications, biometrics unlock and smart lock.

I've found Ceph is more tolerant to failures and staying available. Longhorn was certainly easier to setup and has lower operating requirements, but we encountered outages.

I've had good experiences with Rook on k3s in production. Not on raspis though.

Oh I forgot about UDF. Easy to forget since the GUIs dont usually make it an option when formatting.

Unsure about Android and ChromeOS compatibility.

exFAT is probably better in terms of cross platform compatibility and addresses a lot of the limitations of FAT while remaining portable. Since Snow Leopard OS X is able to read and write out the box. Linux natively supported from kernel 5.4. Windows supports it from updated XP and onwards.

I not sure of Android compatibility though.

Krisp, a noise cancelling application, is able to lock the microphone levels. I believe this works even without it on / without the trial timer counting down.

But yes, going to that kinda length to prevent those applications from messing with the gain control is absurd

Since its landed its available here: https://www.flightradar24.com/data/aircraft/n202vg/#285e221f

Some of these are available here for those in the EU.

https://astrography.com/collections/visions-of-the-future-by...

Not affiliated just a customer.

You maybe right. It could be in another tab on the screen sharing dialog. I perhaps might have missed it.