Viewing profile — crabique

This particular image is a bit different though. By CVEs I mean the architectural stuff that was discovered after the original ingress-nginx repo was archived, so there is no "offi…

Is their ingress-nginx-controller image similar to that of Chainguard: a drop-in replacement with the CVEs fixed?

At least on ZFS, VersityGW absolutely does use sync IO, found it out the hard way on an HDD zpool with no SLOG...

Very cool, I wish there were something similar to this for filesystem images though. Just recently I needed to somehow generate a .tar.gz from a .raw ext4 image and, surprisingly, …

I, too, can vouch for ZFS+VersityGW being a great solution, we were able to scale it vertically on a single-node deployment to a pretty high throughput, both reads and writes. Most…

Care to elaborate?

Yeah unfortunately mirrors is no go due to efficiency requirements, but luckily read performance is not that important if I manage to completely offload FS/S3 metadata and small fi…

In their design document at https://garagehq.deuxfleurs.fr/documentation/design/goals/ they state: "erasure coding or any other coding technique both increase the difficulty of pla…

For sure, there is zero expectations for any kind of hardware downtime tolerance, it's a secondary backup storage cobbled together from leftovers over many years :) For software, a…

It's a very beefy server with 4 NVMe and 20 HDD bays + a 60-drive external enclosure, 2 enterprise grade HBA cards set to multipath round-robin mode, even with 80 drives it's nowhe…

Thanks, but I forgot to specify that I'm interested in S3-compatible servers only. Basically, I have a single big server with 80 high-capacity HDDs and 4 high-endurance NVMes, and …

Is there an open source service designed with HDDs in mind that achieves similar performance? I know none of the big ones work that well with HDDs: MinIO, Swift, Ceph+RadosGW, Seaw…

I wouldn't recommend doing it from a cronjob, there are sometimes things that require sudo to update, breaking changes and important notes from Brew maintainers in the output. It's…

The trick for smooth experience is to treat it like `pacman -Syu`: brew update && brew upgrade && brew autoremove && brew cleanup && brew doctor Running this every few days and fix…

Most CAs offer them, the only requirement is that it's at least an OV (not DV) level cert, and the subject organization proves it owns the IP address.

Get a wildcard for the apex domain/higher-level subdomain, the "secret" subdomain will be covered implicitly. If you don't want the certificate to be in the CT logs, your only opti…

I remember WML tag, essentially SPA 20 years before SPA even became a term.

This is how it works already, the DoH endpoint is "/dns-query", both CloudFlare and Google route this endpoint to their resolver services, while the rest of the site (one.one.one.o…

testssl.sh allows you to scan stuff inside private networks, supports custom ports/SNI, and things like StartTLS.

There's https://github.com/itchyny/gojq which is pretty popular, even GitHub CLI embeds it for their --jq filter.

It does not matter, the intent is obvious no matter how they try to spin it, the damage has been done. I am uninstalling Firefox after 16 years of sustained everyday use in dual-br…

Proper quake mode is just one shortcut to show/hide the entire terminal window, otherwise the app is completely hidden from the app switcher and the dock. This also involves handli…

Somehow this is the first time I see anyone else bring this up, but the fonts are absolutely displayed with wrong kerning on my mac, for my font (at 12pt) I was able to make it loo…

Unfortunately, it's nowhere near close feature-wise just yet: proper quake mode, search, prompt navigation, line timestamps, tab output indicators, forced keyboard locales, customi…

On my system it's ctrl+tab to cycle through tabs, then escape to open the one that is currently highlighted.