HackerTrans
TopNewTrendsCommentsPastAskShowJobs

evertheylen

no profile record

Submissions

Should we start shaming developers who don't use isolation?

evertheylen.eu
2 points·by evertheylen·hace 2 meses·0 comments

Solidjs releases 2.0 beta – The is Over

github.com
3 points·by evertheylen·hace 4 meses·1 comments

comments

evertheylen
·el mes pasado·discuss
Running systemd inside a container + automatic SELinux integration
evertheylen
·hace 2 meses·discuss
I rely on podman for my "devcontainers": https://github.com/evertheylen/probox. If anyone can point me to the weak points in my setup I'd appreciate it!
evertheylen
·hace 2 meses·discuss
If you're looking for a language that aims to solve the "two-language problem" like Mojo, but want something more open, more mature and less influenced by VC funding, check out Julia: https://julialang.org/
evertheylen
·hace 2 meses·discuss
This is cool! But AFAIK bun promises to be a one-stop-shop for all your JS/TS dev needs, while Perry is "just" a compiler from Typescript to native executables.
evertheylen
·hace 3 meses·discuss
Yes! But I'm assuming it will prevent me from upgrading to Postgres 19 in the future.
evertheylen
·hace 3 meses·discuss
From what I can find Postgres 17 [1] introduced incremental backups to pg_basebackup, refined in 18, but nowhere near the full featureset of pgBackRest. Is that what you meant? Having builtin incremental replication to a S3-compatible storage would be great.

[1]: https://www.postgresql.org/docs/release/17.0/#:~:text=pg%5Fb...
evertheylen
·hace 3 meses·discuss
Ah, sad to read this. Does anyone know of good alternatives?
evertheylen
·hace 4 meses·discuss
Lots of cool new ideas like:

- Async is first‑class

- Optimistic primitives (createOptimistic, createOptimisticStore)

- A more predictable scheduler

- And much more!
evertheylen
·hace 5 meses·discuss
It's just OpenStreetMap, see https://wiki.openstreetmap.org/wiki/How_to_contribute
evertheylen
·hace 5 meses·discuss
> Maintaining a data center is much more about solving real-world challenges. The cloud requires expertise in company-specific APIs and billing systems. A data center requires knowledge of Watts, bits, and FLOPs. I know which one I rather think about.

I find this to be applicable on a smaller scale too! I'd rather setup and debug a beefy Linux VPS via SSH than fiddle with various propietary cloud APIs/interfaces. Doesn't go as low-level as Watts, bits and FLOPs but I still consider knowledge about Linux more valuable than knowing which Azure knobs to turn.
evertheylen
·hace 6 meses·discuss
Not really, I used it to develop against a "real" postgres database for a node backend app. It worked fine and made it pretty easy to spin up a development/CI environment anywhere you want. Only when inserting large amounts of data you start to notice it is slower than native postgres. I had to stop using it because we required the postgis extension (although there is some movement on that front!).
evertheylen
·hace 6 meses·discuss
Here in Belgium I have the impression there's steady progress towards such a system: https://wero-wallet.eu
evertheylen
·hace 8 meses·discuss
This is actually how GTFS (a standard format for public transit data) works: https://gtfs.org/documentation/schedule/reference/#stop_time... . Especially sleeper trains can get weird with 30+ hours. But I don't think it's wise to show that to the user
evertheylen
·hace 9 meses·discuss
If you're on Linux, I've tried to build an easy yet secure way to isolate your system from your coding projects with containers. See https://github.com/evertheylen/probox
evertheylen
·hace 9 meses·discuss
Interesting to see Marko and Solid topping the performance metrics. Ryan Carniato* was a core team member of Marko and started Solid. I wouldn't be surprised if SolidStart can eventually lower its bundle size further.

*) https://github.com/ryansolid
evertheylen
·hace 9 meses·discuss
Great piece of software. For me its killer feature is automatically passing through exposed ports in a container, so you don't have to recreate the container with different -p options. (See https://evertheylen.eu/p/probox-intro/#network)
evertheylen
·hace 10 meses·discuss
I always like to see new projects using containers. Two questions:

- how is your devbox.json file different from a Dockerfile/Containerfile?

- does your project attempt to provide any isolation security-wise?
evertheylen
·hace 10 meses·discuss
To add to the article: systemd integration works in the other way too! Running systemd in a Docker container is a pain. It's much easier in Podman: https://developers.redhat.com/blog/2019/04/24/how-to-run-sys...

(Most people use containers in a limited way, where they should do just one thing and shouldn't require systemd. OTOH I run them as isolated developer containers, and it's just so much easier to run systemd in the container as the OS expects.)
evertheylen
·hace 11 meses·discuss
Yeah props to the `pasta` tool, it solves a specific problem really well.

Nice script! I considered a similar approach that's based on "magic" files in the filesystem before, but it was difficult to get the security right. In your case I believe a malicious script can just overwrite .podman/env and it will be sourced by the host the next time you start the container.

I'm happy to discuss this more, feel free to reach out at [email protected]. I'm particularly interested in trying automated ways to try to break out of a container (like https://github.com/brompwnie/botb), this would benefit any containerization project.
evertheylen
·hace 11 meses·discuss
I actually run code-server (derivative of VSCode) inside the container! But I agree that there can be many gotchas, which is why I try to collect as much feedback as possible.