Live data from Hacker News

Viewing profile — kdrag0n

kdrag0n

HN member
Joined
Tue, Jan 28, 2020, 4:09 AM UTC
HN karma
986
Public activity
194 items

About kdrag0n

Building OrbStack, a fast, light, and simple alternative to Docker Desktop: https://orbstack.dev

https://kdrag0n.dev

Email: hn@.dev

Recent public activity

  1. comment
    Comment #48478086

    Interesting, what devices would you want to pass through?

  2. comment
    Comment #48476561

    love to hear it!

  3. comment
    Comment #48476375

    The Linux VM host and guest components are all custom, as well as the daemon that manages machines. It currently uses LXC as the runtime but that's being replaced as well. For cont…

  4. comment
    Comment #48475981

    Can you share more details? OrbStack has always supported inotify/fanotify (Linux fs watching APIs) on bind mounts and most people use watchers with no issues. Happy to look into w…

  5. comment
    Comment #48470940

    We're working on block device passthrough for the builtin SD reader.

  6. comment
    Comment #48470727

    That's my bad, I used the example alpine commands and the official alpine doesn't have init. It's supported if you build an image with systemd installed

  7. comment
    Comment #48470559

    Yep! Still refining it but isolated machines now have fine-grained settings for filesystem mounts, network isolation, SSH agent forwarding, and CPU/memory/disk limits

  8. comment
    Comment #48470405

    Curious if you've tried OrbStack? There's always more work to do (test workloads appreciated!) but we've put a lot of effort into optimizing for small files and other common develo…

  9. comment
    Comment #48470354

    Ahh those were good times, glad you came across it :)

  10. comment
    Comment #48470311

    Good catch, I tried the example alpine commands and there was no init system. Makes sense if it's based on OCI images

  11. comment
    Comment #48470262

    We just released this in OrbStack :) https://docs.orbstack.dev/features/usb Blog post soon

  12. comment
    Comment #48470145

    (OrbStack dev here.) Instead of Virtualization.framework, we have a custom Rust virtualization stack with custom devices and protocols for things like filesystem sharing. It's a hi…

  13. comment
    Comment #48321188

    We have isolated machines in OrbStack now! Isolated machines have options for network isolation and mounting only specific paths (or none).

  14. comment
    Comment #48321177

    We're releasing USB in OrbStack tomorrow :)

  15. comment
    Comment #47125597

    what tasks can the model do out of the box? was each of the examples a different fine tuned model?

  16. story
  17. story
  18. comment
    Comment #42226957

    Love to hear that :) sent you an email about the k8s IPv6 issue — should be able to get it fixed in OrbStack

  19. comment
    Comment #41426191

    A small team now :) (not back then though)

  20. comment
    Comment #41424835

    Drop-in: "orb" to start, stop it + uninstall + restart Colima to revert. It can optionally install OrbStack's bundled `docker` and `docker compose` binaries, but you can also keep …

  21. comment
    Comment #41424760

    The issue submitter just happened to be running LXD in their OrbStack machine.

  22. comment
    Comment #41424665

    Sorry, no plans for that. That vertical integration is a key part of OrbStack — it's not just for nice extras/integrations.

  23. comment
    Comment #41424651

    OrbStack domains can be nice but you don't have to use them. It's fully compatible with Compose, so you can just run the same commands with no changes to your setup. Did that not w…

  24. comment
    Comment #41423187

    It's a shared VM and kernel, so the security boundary between containers is only as strong as typical Linux containers, and we don't really use the VM as a strong security boundary…

  25. comment
    Comment #41423155

    It's because Rosetta doesn't seem to emulate /proc/cpuinfo, so the contents reflect that of the arm64 host.