HackerTrans
トップ新着トレンドコメント過去質問紹介求人

evertheylen

no profile record

投稿

Should we start shaming developers who don't use isolation?

evertheylen.eu
2 ポイント·投稿者 evertheylen·2 か月前·0 コメント

Solidjs releases 2.0 beta – The is Over

github.com
3 ポイント·投稿者 evertheylen·4 か月前·1 コメント

コメント

evertheylen
·先月·議論
Running systemd inside a container + automatic SELinux integration
evertheylen
·2 か月前·議論
I rely on podman for my "devcontainers": https://github.com/evertheylen/probox. If anyone can point me to the weak points in my setup I'd appreciate it!
evertheylen
·2 か月前·議論
If you're looking for a language that aims to solve the "two-language problem" like Mojo, but want something more open, more mature and less influenced by VC funding, check out Julia: https://julialang.org/
evertheylen
·2 か月前·議論
This is cool! But AFAIK bun promises to be a one-stop-shop for all your JS/TS dev needs, while Perry is "just" a compiler from Typescript to native executables.
evertheylen
·3 か月前·議論
Yes! But I'm assuming it will prevent me from upgrading to Postgres 19 in the future.
evertheylen
·3 か月前·議論
From what I can find Postgres 17 [1] introduced incremental backups to pg_basebackup, refined in 18, but nowhere near the full featureset of pgBackRest. Is that what you meant? Having builtin incremental replication to a S3-compatible storage would be great.

[1]: https://www.postgresql.org/docs/release/17.0/#:~:text=pg%5Fb...
evertheylen
·3 か月前·議論
Ah, sad to read this. Does anyone know of good alternatives?
evertheylen
·4 か月前·議論
Lots of cool new ideas like:

- Async is first‑class

- Optimistic primitives (createOptimistic, createOptimisticStore)

- A more predictable scheduler

- And much more!
evertheylen
·5 か月前·議論
It's just OpenStreetMap, see https://wiki.openstreetmap.org/wiki/How_to_contribute
evertheylen
·5 か月前·議論
> Maintaining a data center is much more about solving real-world challenges. The cloud requires expertise in company-specific APIs and billing systems. A data center requires knowledge of Watts, bits, and FLOPs. I know which one I rather think about.

I find this to be applicable on a smaller scale too! I'd rather setup and debug a beefy Linux VPS via SSH than fiddle with various propietary cloud APIs/interfaces. Doesn't go as low-level as Watts, bits and FLOPs but I still consider knowledge about Linux more valuable than knowing which Azure knobs to turn.
evertheylen
·6 か月前·議論
Not really, I used it to develop against a "real" postgres database for a node backend app. It worked fine and made it pretty easy to spin up a development/CI environment anywhere you want. Only when inserting large amounts of data you start to notice it is slower than native postgres. I had to stop using it because we required the postgis extension (although there is some movement on that front!).
evertheylen
·6 か月前·議論
Here in Belgium I have the impression there's steady progress towards such a system: https://wero-wallet.eu
evertheylen
·8 か月前·議論
This is actually how GTFS (a standard format for public transit data) works: https://gtfs.org/documentation/schedule/reference/#stop_time... . Especially sleeper trains can get weird with 30+ hours. But I don't think it's wise to show that to the user
evertheylen
·9 か月前·議論
If you're on Linux, I've tried to build an easy yet secure way to isolate your system from your coding projects with containers. See https://github.com/evertheylen/probox
evertheylen
·9 か月前·議論
Interesting to see Marko and Solid topping the performance metrics. Ryan Carniato* was a core team member of Marko and started Solid. I wouldn't be surprised if SolidStart can eventually lower its bundle size further.

*) https://github.com/ryansolid
evertheylen
·9 か月前·議論
Great piece of software. For me its killer feature is automatically passing through exposed ports in a container, so you don't have to recreate the container with different -p options. (See https://evertheylen.eu/p/probox-intro/#network)
evertheylen
·10 か月前·議論
I always like to see new projects using containers. Two questions:

- how is your devbox.json file different from a Dockerfile/Containerfile?

- does your project attempt to provide any isolation security-wise?
evertheylen
·10 か月前·議論
To add to the article: systemd integration works in the other way too! Running systemd in a Docker container is a pain. It's much easier in Podman: https://developers.redhat.com/blog/2019/04/24/how-to-run-sys...

(Most people use containers in a limited way, where they should do just one thing and shouldn't require systemd. OTOH I run them as isolated developer containers, and it's just so much easier to run systemd in the container as the OS expects.)
evertheylen
·11 か月前·議論
Yeah props to the `pasta` tool, it solves a specific problem really well.

Nice script! I considered a similar approach that's based on "magic" files in the filesystem before, but it was difficult to get the security right. In your case I believe a malicious script can just overwrite .podman/env and it will be sourced by the host the next time you start the container.

I'm happy to discuss this more, feel free to reach out at [email protected]. I'm particularly interested in trying automated ways to try to break out of a container (like https://github.com/brompwnie/botb), this would benefit any containerization project.
evertheylen
·11 か月前·議論
I actually run code-server (derivative of VSCode) inside the container! But I agree that there can be many gotchas, which is why I try to collect as much feedback as possible.