Readit News logoReadit News
skydhash commented on About Containers and VMs   linuxcontainers.org/incus... · Posted by u/Bogdanp
aitchnyu · 12 hours ago
Are (self hosting) people putting multiple services like Django app, Postgres, Redis etc into a single container/lightweight VM instead of using Docker Compose with single-purpose containers?
skydhash · 9 hours ago
You don’t have too, as you can create a single posgres instance for your services.

I prefer Incus, because you can’t do adhoc patching with docker. Instead you have to rebuild the images and that becomes a hassle quicky in a homelab settings. Incus have a VM feel while having docker management UX.

skydhash commented on Malicious versions of Nx and some supporting plugins were published   github.com/nrwl/nx/securi... · Posted by u/longcat
f311a · a day ago
It runs indefinitely to process small jobs. I could log stats somewhere, but it complicates things. Right now, it's just a single binary that automatically gets restarted in case of a problem.
skydhash · a day ago
Why not print on stdout, then redirect it to a file?
skydhash commented on Malicious versions of Nx and some supporting plugins were published   github.com/nrwl/nx/securi... · Posted by u/longcat
Eji1700 · a day ago
> Why is that unrealistic?

Because the vast majority of development is done by people with a very narrow focus of skills on an extreme deadline, and you actually comfortable with compression, networking, encryption, IO, and all the other taken for granted libraries that wind up daisy chained together?

Because if you are, great, but at the same time, that's not the job description for like 90% of coding jobs. I don't expect my frontend guy to need to know encryption so he can review the form library he's using.

skydhash · a day ago
Why would a form library have encryption? That's a red flag for me.
skydhash commented on Malicious versions of Nx and some supporting plugins were published   github.com/nrwl/nx/securi... · Posted by u/longcat
imiric · a day ago
There's no guarantee that software/library vX.Y.Z packaged by distro A will be identical in behavior to one packaged by distro B. Sure, distro maintainers have all sorts of guidelines, but in reality, mistakes happen, and there can be incompatibilities between the version a developer has been testing against, and one the end user is using.

Relying on feature flags is a pie in the sky solution, and realistically developers shouldn't have to be concerned with such environmental issues. Dependency declarations should be relied on to work 100% of the time, whether they're specified as version numbers or checksums. Since they're not reliable in practice, vendoring build and runtime dependencies is the only failproof method.

This isn't to say that larger teams shouldn't support specific distros directly, but my point is that smaller teams simply don't have the resources to do so.

skydhash · a day ago
But why do you care that much about how the user is running your code?

Maybe my laptop is running Alpine and I patches some libraries to support musl and now some methods are NOP. As the developer, why does it matter to you?

You would want me to have some chroot or container installation for me to install a glibc based system so that you can have a consistent behavior on every computer that happens to run your code? Even the ones you do not own?

skydhash commented on Malicious versions of Nx and some supporting plugins were published   github.com/nrwl/nx/securi... · Posted by u/longcat
mr_mitm · a day ago
So your issue isn't related to auto updates at all, not even "almost always"
skydhash · a day ago
Apt doesn't autoupdate.
skydhash commented on Malicious versions of Nx and some supporting plugins were published   github.com/nrwl/nx/securi... · Posted by u/longcat
imiric · a day ago
Right. Build and runtime dependencies are a separate matter. But for runtime dependencies, it's easier for developers to supply an OCI image, AppImage, or equivalent, with the exact versions of all dependencies baked in, than to support every possible package manager on every distro, and all possible dependency and environment permutations.

This is also much easier for the user, since they only need to download and run a single self-contained artifact, that was previously (hopefully) tested to be working as intended.

This has its own problems, of course, but it is the equivalent of vendoring build time dependencies.

The last part of my previous comment was specifically about the practice of distros carrying build time libraries. This might've been acceptable for C/C++ that have historically lacked a dependency manager, but modern languages don't have this problem. It's a burden that distro maintainers shouldn't have to worry about.

skydhash · a day ago
> it's easier for developers to supply an OCI image, AppImage, or equivalent, with the exact versions of all dependencies baked in, than to support every possible package manager on every distro,

No developer is being asked to support every distro. You just need to provide the code and the requirement list. But some developer made the latter overly restrictive. And tailor the project to support only one release process.

> This is also much easier for the user, since they only need to download and run a single self-contained artifact, that was previously (hopefully) tested to be working as intended

`apt install` is way easier than the alternative and more secure.

> It's a burden that distro maintainers shouldn't have to worry about.

There's no burden because no one does it. You have dev version for libraries because you need them to build the software that is being packaged. No one packages library that is not being used by the software available in the distro. It's a software repository, not a library repository.

skydhash commented on Malicious versions of Nx and some supporting plugins were published   github.com/nrwl/nx/securi... · Posted by u/longcat
marcosdumay · a day ago
It's not reasonable to expect every software in existence to work with a compatible set of dependencies. So no, the distro can't supply all the libraries.

What happens is that distro developers spend their time patching the upstream so it works with the set included on the distro. This has some arguable benefits to any user that wants to rebuild their software, at the cost of random problems added by that patching that flies under the radar of the upstream developers.

Instead, the GPs proposal of vendoring the dependencies solves that problem, without breaking the compilation, and adds another set of issues that may or may not be a problem. I do argue that it's a good option to keep on one's mind to apply when necessary.

skydhash · a day ago
> It's not reasonable to expect every software in existence to work with a compatible set of dependencies. So no, the distro can't supply all the libraries.

That is not what it's being asked.

As a developer, you just need to provide the code and the list of requirements. And maybe some guide about how to build and run tests. You do not want to care about where I find those dependencies (Maybe I'm running you code as PID 1).

But a lot of developers want to be maintainers as well and they want to enforce what can be installed on the user's system. (And no I don't want docker and multiple versions of nginx)

skydhash commented on Desktop Linux Keeps Winning the Wrong Battles   howtogeek.com/desktop-lin... · Posted by u/the-mitr
donmcronald · a day ago
MacOS has some really clunky stuff. I hate finder. I like Gnome once I add dash to dock, tray icons, and window manager tweaks. I’m just saying the defaults are a bad choice if they want adoption.
skydhash · a day ago
I use GNOME without extensions. The default are fine by me.

But your use case is why GNOME have extensions. To alter the defaults and add stuff that they don't care about, but you do. In macOS, you have to basically reverse engineer and use private APIs.

skydhash commented on Desktop Linux Keeps Winning the Wrong Battles   howtogeek.com/desktop-lin... · Posted by u/the-mitr
_fat_santa · a day ago
> Yeah the real problem is that the only thing that’s well tested is what devs use

I see this issue as well. A CLI setup with Emacs/VIM doing C/C++ development is very stable, because that's how the majority of linux devs interact with Linux.

What puts a bad taste in my mouth is when you mention issues outside of that setup, the usual response isn't "oh this is an issue we need to fix", it's "well your setup sucks, stop using VSCode/Gnome/Chrome/etc"

skydhash · a day ago
Chrome and VSCode do suck. More developers there than the Linux kernel and they won't play nice with Wayland. Shame!
skydhash commented on Desktop Linux Keeps Winning the Wrong Battles   howtogeek.com/desktop-lin... · Posted by u/the-mitr
gjsman-1000 · a day ago
> Being able to run Windows apps on Linux is a benefit, not a failure.

It is a massive moral failure though. It shows that after two decades of work, the Linux community has been unable to build a simple sane functional stable development environment better than Win32.

skydhash · a day ago
Sane here is bearing a lot of weight. Developing on Linux is far easier than developing on Windows. I've never seen a windows project as simple as nq[0] or dwm[1].

[0]: https://git.vuxu.org/nq/

[1]: https://git.suckless.org/dwm/files.html

u/skydhash

KarmaCake day3984April 24, 2019View Original