HackerTrans
TopNewTrendsCommentsPastAskShowJobs

evertheylen

no profile record

Submissions

Should we start shaming developers who don't use isolation?

evertheylen.eu
2 points·by evertheylen·2 เดือนที่ผ่านมา·0 comments

Solidjs releases 2.0 beta – The is Over

github.com
3 points·by evertheylen·4 เดือนที่ผ่านมา·1 comments

comments

evertheylen
·เดือนที่แล้ว·discuss
Running systemd inside a container + automatic SELinux integration
evertheylen
·2 เดือนที่ผ่านมา·discuss
I rely on podman for my "devcontainers": https://github.com/evertheylen/probox. If anyone can point me to the weak points in my setup I'd appreciate it!
evertheylen
·2 เดือนที่ผ่านมา·discuss
If you're looking for a language that aims to solve the "two-language problem" like Mojo, but want something more open, more mature and less influenced by VC funding, check out Julia: https://julialang.org/
evertheylen
·2 เดือนที่ผ่านมา·discuss
This is cool! But AFAIK bun promises to be a one-stop-shop for all your JS/TS dev needs, while Perry is "just" a compiler from Typescript to native executables.
evertheylen
·3 เดือนที่ผ่านมา·discuss
Yes! But I'm assuming it will prevent me from upgrading to Postgres 19 in the future.
evertheylen
·3 เดือนที่ผ่านมา·discuss
From what I can find Postgres 17 [1] introduced incremental backups to pg_basebackup, refined in 18, but nowhere near the full featureset of pgBackRest. Is that what you meant? Having builtin incremental replication to a S3-compatible storage would be great.

[1]: https://www.postgresql.org/docs/release/17.0/#:~:text=pg%5Fb...
evertheylen
·3 เดือนที่ผ่านมา·discuss
Ah, sad to read this. Does anyone know of good alternatives?
evertheylen
·4 เดือนที่ผ่านมา·discuss
Lots of cool new ideas like:

- Async is first‑class

- Optimistic primitives (createOptimistic, createOptimisticStore)

- A more predictable scheduler

- And much more!
evertheylen
·5 เดือนที่ผ่านมา·discuss
It's just OpenStreetMap, see https://wiki.openstreetmap.org/wiki/How_to_contribute
evertheylen
·5 เดือนที่ผ่านมา·discuss
> Maintaining a data center is much more about solving real-world challenges. The cloud requires expertise in company-specific APIs and billing systems. A data center requires knowledge of Watts, bits, and FLOPs. I know which one I rather think about.

I find this to be applicable on a smaller scale too! I'd rather setup and debug a beefy Linux VPS via SSH than fiddle with various propietary cloud APIs/interfaces. Doesn't go as low-level as Watts, bits and FLOPs but I still consider knowledge about Linux more valuable than knowing which Azure knobs to turn.
evertheylen
·6 เดือนที่ผ่านมา·discuss
Not really, I used it to develop against a "real" postgres database for a node backend app. It worked fine and made it pretty easy to spin up a development/CI environment anywhere you want. Only when inserting large amounts of data you start to notice it is slower than native postgres. I had to stop using it because we required the postgis extension (although there is some movement on that front!).
evertheylen
·6 เดือนที่ผ่านมา·discuss
Here in Belgium I have the impression there's steady progress towards such a system: https://wero-wallet.eu
evertheylen
·8 เดือนที่ผ่านมา·discuss
This is actually how GTFS (a standard format for public transit data) works: https://gtfs.org/documentation/schedule/reference/#stop_time... . Especially sleeper trains can get weird with 30+ hours. But I don't think it's wise to show that to the user
evertheylen
·9 เดือนที่ผ่านมา·discuss
If you're on Linux, I've tried to build an easy yet secure way to isolate your system from your coding projects with containers. See https://github.com/evertheylen/probox
evertheylen
·9 เดือนที่ผ่านมา·discuss
Interesting to see Marko and Solid topping the performance metrics. Ryan Carniato* was a core team member of Marko and started Solid. I wouldn't be surprised if SolidStart can eventually lower its bundle size further.

*) https://github.com/ryansolid
evertheylen
·9 เดือนที่ผ่านมา·discuss
Great piece of software. For me its killer feature is automatically passing through exposed ports in a container, so you don't have to recreate the container with different -p options. (See https://evertheylen.eu/p/probox-intro/#network)
evertheylen
·10 เดือนที่ผ่านมา·discuss
I always like to see new projects using containers. Two questions:

- how is your devbox.json file different from a Dockerfile/Containerfile?

- does your project attempt to provide any isolation security-wise?
evertheylen
·10 เดือนที่ผ่านมา·discuss
To add to the article: systemd integration works in the other way too! Running systemd in a Docker container is a pain. It's much easier in Podman: https://developers.redhat.com/blog/2019/04/24/how-to-run-sys...

(Most people use containers in a limited way, where they should do just one thing and shouldn't require systemd. OTOH I run them as isolated developer containers, and it's just so much easier to run systemd in the container as the OS expects.)
evertheylen
·11 เดือนที่ผ่านมา·discuss
Yeah props to the `pasta` tool, it solves a specific problem really well.

Nice script! I considered a similar approach that's based on "magic" files in the filesystem before, but it was difficult to get the security right. In your case I believe a malicious script can just overwrite .podman/env and it will be sourced by the host the next time you start the container.

I'm happy to discuss this more, feel free to reach out at [email protected]. I'm particularly interested in trying automated ways to try to break out of a container (like https://github.com/brompwnie/botb), this would benefit any containerization project.
evertheylen
·11 เดือนที่ผ่านมา·discuss
I actually run code-server (derivative of VSCode) inside the container! But I agree that there can be many gotchas, which is why I try to collect as much feedback as possible.