Viewing profile — rapidlua

For go specifically, I find ko-build handy. It builds on the host (leveraging go crosscompilation and taking advantage of caches) and outputs a Docker image.

> How to manage pointer+offset address integrity/legality inside the kernel (for instance) has a proof by examples a-plenty in the other code Let me provide some context here. Thes…

Go build is fundamentally better? How so? Go build is so light on features that adding generated files to source control is a norm in go land.

> Packages may not circularly reference each other. Actually possible with go:linkname.

I do occasionally attempt to edit patch files produced by git-format-patch. Frequently I end up with corrupt patch. Still curious how to fix those numbers.

Is it just me, or the piece doesn’t explain how to make edits without messing up the hunk?

Re nuclear reactor: higher tier virtualization products work flawlessly. It is a shame what a garbage virtual box turned into over the years.

It was fun to read, but it would’ve probably been easier to rely on seccomp filters instead.

Hardly. For starters, wasm doesn’t guarantee that a piece of code terminates in bound time. There are further security guarantees in ebpf such as any lock acquired must be released…

Great writeup, thoroughly enjoyed! The provided "lab" is especially appreciated. I'm curious if you had reasons to not use veth in noarp mode.

Thank you for bpftrace! It was a vital aid for kernel spelunking. Very excited to see vmtest. I did a similar tool in the past [1] but never achieved this level of polish. [1] http…

The BPF instrumentation is quite cool! I wonder if uprobes have a performance impact. Does it roughly compare to a single syscall? https://github.com/keyval-dev/opentelemetry-go-in…

> Docker only uses namespaces and cgroups. How is that not isolation?

There was an entry from one of the Chrome early developers on NH recently: https://neugierig.org/software/blog/2022/12/chrome.html > “Chrome 12 [an old version] was the best Chrome…

Sorry, but I’m failing to see how rootless containers are relevant. Having multiple user accounts is a legit use case - think e.g. a shared device. A typical Linux package manager’…

Homebrew the package manager is quite popular but that doesn’t indicate that it is engineered well. For instance, it doesn’t work with multiple user accounts which is such a trivia…

This is an impressive effort. I would love to see ignore rules for the particular editors and ideS added to project .gitignore files less frequently though. Which editor someone us…

As of today, vector’s iterator is just a pointer. You need more than just a pointer to detect out of bounds accesses. It makes old binaries incompatible with new binaries. It also …

But c’mon there’s no such thing as safe brain surgery. Would you then market brain surgeries as unsafe?

This is unfortunately ABI-altering, therefore it won’t be possible to selectively enable for projects that want it. It’s a distribution that has either to bite the bullet and say “…

This is mostly due to ease of distribution. The binary is self-contained, no need to ship anything but the binary itself. You can also compile locally and then run it elsewhere tha…

This is fake. Sells at 105 right now. Edit: I have an account in a Russian bank and can purchase usd at this rate right now.

I strongly suspect that the buffer size is largely irrelevant. The article linked from readme estimates the amount of syscalls needed with the default buffer size as 16K. That’s pe…