Hacker News Reader

First of all - the Namespaces and Cgroups on Linux are not about security. They are about features.

FreeBSD Jails provide both secure isolation from the host and also provide the separated network namespace and resources with rctl(8) when needed.

To have Linux containers separated and secured you need additional layer for that - like SELinux or AppArmor. Only then Docker/Podman/other/... Linux containers are isolated and secure.

Regards.

vermadenon FreeBSD 13.2 on ThinkPad T14 (GEN1)

| > FreeBSD gaming

| That's a thing? Wow. :'D

For some oldschool gaming its more then capable :p

- https://vermaden.wordpress.com/2020/10/14/oldschool-gaming-o...

vermadenon FreeBSD 13.2 on ThinkPad T14 (GEN1)

Thank You.

Do You think I should add anything more there?

vermadenon FreeBSD 13.2 on ThinkPad T14 (GEN1)

... and magic ZFS Boot Environments :)

Moar here: https://is.gd/BECTL

vermadenon FreeBSD 13.2 on ThinkPad T14 (GEN1)

Mine reasons here:

- https://vermaden.wordpress.com/2020/09/07/quare-freebsd/

vermadenon FreeBSD 13.2 on ThinkPad T14 (GEN1)

If you would read the article - you would found this link [1] inside - that explains these reasons :)

[1] https://vermaden.wordpress.com/2020/09/07/quare-freebsd/

vermadenon FreeBSD 13.2 on ThinkPad T14 (GEN1)

Most people that see my laptop often say that I use too tiny font sized.

I can see/read them - I do that to have more screen space of other things ... but that is me - feel free to use larger font sizes if that suits you better.

Regards.

vermadenon The SGI XFS Filesystem

Single drive ZFS is also a great use case for ZFS because:

- full data integrity check (not only metadata like with XFS)

- transparent compression (LZ/ZSTD/...)

- ZFS Boot Environments - makes your system bulletproof against changes

- easy move ZFS Boot Environments between systems with zfs send|zfs recv commands

None of that is possible with XFS.

vermadenon The SGI XFS Filesystem

You can read more about ZFS compatibility here for example:

- https://vermaden.wordpress.com/2022/03/25/zfs-compatibility/

vermadenon Ask HN: It's 2023, how do you choose between MySQL and Postgres?

Its simple AF - I just always pick the well proven PostgreSQL database.

... if that is too big I use SQLite.

vermadenon Ask HN: Most interesting tech you built for just yourself?

I mostly do interesting stuff on FreeBSD and its all documented in as detailed form as possible here:

- https://vermaden.wordpress.com/

Regards, vermaden

vermadenon Bringing Memory Safety to sudo and su

Why not just use doas(1) instead?

doas(1)

- doas(1) - portable version has about 500 lines of code

- doas(1) man pages - 157 lines long

- doas(1) had 2 CVEs

sudo(8)

- sudo(8) - about 120,000 lines of code (100x more)

- sudo(8) man pages - 10 000 lines long

- sudo(8) had 140 CVEs

The CVEs comparison is from 'all time' and as sudo(8) has longer history then doas(1) - it will (at least statistically) have more of these ... I expect doas(1) to have about 5-10 CVEs when they would have the same life span.

Regards,

vermaden

vermadenon sudo-rs: A memory safe implementation of sudo and su

Yes - and with better results I think :)

doas(1)

- doas(1) - portable version has about 500 lines of code

- doas(1) man pages - 157 lines long

- doas(1) had 2 CVEs

sudo(8)

- sudo(8) - about 120,000 lines of code (100x more)

- sudo(8) man pages - 10 000 lines long

- sudo(8) had 140 CVEs

Regards,

vermaden

vermadenon sudo-rs: A memory safe implementation of sudo and su

I would rename it to suro(8) instead of sudo(8) :>

vermadenon Ask HN: An OS for people who hate changes?

FreeBSD should suit you well.

Its developers use the POLA for the system development which means Principle of Least Astonishment.

It also has tons of useful features:

- https://vermaden.wordpress.com/2020/09/07/quare-freebsd/

Regards.

vermadenon PC Engines apu platform EOL

I always liked the idea of PC Engines small fanless computers/motherboards ... but one thing always bothered me - they were really pricey.

On the other hand - there are other multiple choices that serve similar role as PC Engines.

For example I recently switched to Dell Wyse 3030 LT boxes which are very cheap (20-30$ for used one) and they draw very little amount of power (3.8-4.2W measured with physical watt-o-meter).

Some details here:

- https://vermaden.wordpress.com/2023/04/10/silent-fanless-del...

vermadenon FreeBSD 13.2

Ubuntu has only fraction of what FreeBSD has when it comes to ZFS.

Several things that Ubuntu misses:

- lack of ZFS Boot Environments - https://is.gd/BECTL - https://is.gd/BEADM

- no bootloader integration

- still requires ancient EXT4 or XFS /boot to start system

... and while the version of ZFS is newer on FreeBSD you can always install these packages and have LATEST OpenZFS available:

- sysutils/openzfs

- sysutils/openzfs-kmod

Hope that helps.

vermadenon FreeBSD 13.2

Mostly of those reasons:

- https://vermaden.wordpress.com/2020/09/07/quare-freebsd/

Its simple and logical with lots of useful features that most people do not even know exist.

Also in may aspects it makes my life easier - like with ZFS Boot Environments or Rescue subsystem - Ports and Source infrastructure for custom system/packages building.

I also like the Community.

Here is mine 'desktop' documentation if needed:

- https://vermaden.wordpress.com/freebsd-desktop/

Regards.

vermadenon Silent Fanless Dell Wyse 3030 LT FreeBSD Server

Thanks mate.

vermadenon When root on ZFS breaks on Arch Linux

This: https://i.imgur.com/W3edB3t.png

Seems nothing changed for the part 5 years ...

Moar details here: https://is.gd/BECTL

In other words - when it comes to #ZFS - just use #FreeBSD - you will thank me later.

vermadenon FreeBSD Home Audio Studio

Fixed. Thanks.

vermadenon 16,000 Amazon workers launched petition to fight CEO mandate to return to office

These 16000 people should dump amazon - all at once on the same day.

That is how you fight ... hit where it hurts.

Do not please for things that are obvious - just change company to one that is not retarded when it comes to work from home topic.

vermadenon The legacy of fy_iceworld, Counter-Strike’s divisive, popular custom map (2020)

Another less known (and very underrated one) but awesome CS 1.x map is cs_crackhouse. Spent a lot of time there ...

vermadenon The quest to make Linux bulletproof

If Linux would like to bulletproof then they would implement ZFS Boot Environments that FreeBSD has with beadm(8) or bectl(8) tools.

With ZFS Boot Environments you can change any aspect of the system/upgrade everything/change packages and even leave system in totally broken state ... and just reboot to one of other Boot Environments that you created earlier - once you 'got it' how awesome and useful that is - you will want that everywhere.

Some more info here: https://is.gd/BECTL

Regards.

vermadenon Ask HN: What is the best advice you got on any aspect of life?

Do not give a fuck about things that you should not give a fuck.

Its pointless to waste your time and energy for them.

What are they?

You decide.

vermadenon Tell HN: Please let me just buy stuff without having to “Contact Sales”

That is good first 'sign' of companies to avoid.

Either they have plain and simple pricing or its just a bullshit dance with sales team.

Choose wisely.

Often the product is not worth the dance ...

vermadenon ThinkPad T420

I do not agree.

ThinkPad W520 is so much better while having all features of T420 and more.

Things in W520 is better:

- FullHD (1920x1080) screen instead of only 1600x900

- USB 3.0 ports instead of only USB 2.0 ports

- powerful GPU instead of limited one

- will have 4 cores and 8 threats instead of 2 cores and 4 threads

- has 4 RAM slots so 32 GB RAM is possible

In case you really need smaller size - the T420s is better:

- has USB 3.0 port

- has the same 1600x900 resolution

- is smaller/thinner/lighter

- can use UltraBay battery instead of CD/DVD

... and I would even say that even X220 is better then T420:

- even smaller

- with i7 CPU will have one USB 3.0 port

- can have IPS screen

- the only downside (and that is bad to be honest) is 1366x768 resolution

The T420 seems to be the worst of the series ...

From the daily user of FreeBSD on W520 and X220 depending on the needs.

Regards.

vermadenon Ask HN: Best Printer for less than $100?

Samsung ML-1915 for example.

vermadenon Native Urban Terror on FreeBSD

I played a lot of CS 1.5 and CS 1.6 (and some CS:GO) and to be honest its 'far' from CS experience ... but its just different - more QUAKE like - its not bad - its just different ... and I am getting old so aiming at anything at the speed I got used to when I was at my 20s is another thing :p

vermadenon A first person shooter in 571 lines of GNU Awk (2016)

Fortunately the gawk(1) package name is the same on FreeBSD :)

    # pkg install gawk