Hug of death incoming? Nice project. I noticed that it takes like one second to load. Might be cloudflare? Or the weak CPU? However, nice proof of concept.
CV/ML takes a lot of resources, so If you wanted to have an advantage by choosing a certain linux distro, I'd suggest one that sets up a super minimal system.
In reality, choose any distro. Want suggestions? Then perhaps linux mint If you are new to linux.
>policies are scattered across IAM, config, and application layers
Where is the problem with that? We handle IAM with HCL/Terraform on GCP. Application config should imo. be out of scope of Terraform. You can handle that in config files, managed via ansible or kustomize, whatever.
Overall I think this article is not to be taken seriously. Terraform is not perfect, but depending on the provider used, it does its supposed job. Configure my cloud infrastructure, GCP/AWS/Azue, even proxmox has a provider.
I think the author just wants one tool that does all things, an AI that builds everything for you.
I understand the easiness of that approach, but companies should realize that relying on a giant American company for stuff like that, is going to bite them in the ass, eventually.
Whether or not the US has that backdoor, we really need open source software for networking equipment. Yes, there are open source firewalls, like OPNSense, but so far we are lacking good and generally available open source software for network switches. And at least from what I have heard OPNSense is more a firewall than a router. Not sure how well it is handling BGP and other stuff ISP need.
Since Mikrotik has been mentioned, I really wonder why they do not open source their SwitchOS. They are essentially giving it away "for free" with each of their switches anyway.
I am aware that network equipment, especially with hardware offloading (fast pass) is a little bit more complicated than just putting a linux kernel onto it, but I really wish for some development into that direction.
I would actually recommend to just use a hardware wallet. The monero-cli or the Monero GUI-Wallet are sufficient. Just drop your wallet onto an USB stick with LUKS encryption. Get your recovery seed + wallet height written by hand and bury them somewhere in your garden, or your parents garden in safe box.
Drop me your address, and I will also send a little bit your way, to get you hooked!
>Because google actually cares about hardware and software security.
That statement might not have aged so well, especially consindering googles attempt to lock out apps from their devices, If the developers do not comply with being oficially registered.
I am not bashing Pulumni, or glorifying Terraform, but the examples shown in the article are simple, and do not proof any of the mentioned advantages.