211–220 of 374 posts
Earlier quoted context omitted.
For example people do not use homebrew to install python3 on a fresh install of mac os and get a python that spews a bunch of messages to stderr about the version of libc6.so and cannot speak TLS.
It only upgrades PostgreSQL 3 major versions up alongside without asking.
How does this work? Fundamentally, containers are about namespace/isolation of a bunch of OS interfaces, so file system functions, network functions, memory management, process functions, etc, can all pretend like they're the only game in town, but crucially without having to virtualize out the kernel. Does XNU have such namespacing functionality across all its interfaces? Furthermore, the existing container ecosyste…
This introduces a long-standing problem that is really the main issue I have with Docker/Podman/containers on anything other than Linux - you have a dedicated VM that needs memory to be set aside for it exclusively. This is fine if you have a 32/64GB machine, but less so on an 8GB non-upgradeable laptop. I get it - memory is relatively cheap these days - and manufacturers that are building memory-limited devices are…
I imagine over time it will get smarter too. Right now it waits for no containers to be running for 30 seconds and enables resource saving mode but who knows what could happen in the future. Maybe it can internally profile and estimate load based on evaluating runtime stats of your contains and dynamically change the VM's resources on the fly and then expose a +% over provision threshold option or a way to turn off dynamic resource saver mode.
Earlier quoted context omitted.
There's only a 1% chance these days on Linux that your sound won't work or your computer won't sleep when you close the lid or your wifi won't work, or your ethernet, or your cooling, or a peripheral, or CPU/memory spikes. And a 90% chance it'll be at least one such thing.
All of those things work fine on every computer in my household that runs Linux. This spans thinkpad, dell and ASUS laptops, Dell desktops, home-built gamer type desktops, a few raspberry pi's, and a SFF PC we use to run Kodi on the main TV. I do find it amusing in a thread about how you have to turn off a core security feature to be able to use containers properly on a Mac that the discussion immediately turns to ho…
Earlier quoted context omitted.
Original author here. Thanks for spotting the typo, fixed. WRT security implications of disabling SIP - I don't think OS becomes any less vulnerable than usual Linux/Windows installation.
Docker Desktop doesn’t require me to disable SIP. Why would I use this if it requires that?
It’s remarkable that Apple doesn’t have a first party solution to this yet. They used be, or aspire to be, at the forefront of OS research.“The most advanced Unix”. They’re not even trying, now.
A/UX wasn't that much advanced, and most technology interesting stuff in NeXTSTEP, and OS X, is completely unrelated to UNIX.
launchd inspired systemd.
Spotlight (real time indexing and notification) is something I miss in Linux today.
64bit Unix layer on consumer hardware (G5).
All of that stuff was not a first ever implementation, of course, but it was well executed and led the way.
All of that was more than a decade ago.
Earlier quoted context omitted.
A/UX wasn't that much advanced, and most technology interesting stuff in NeXTSTEP, and OS X, is completely unrelated to UNIX.
Off the top of my head: launchd inspired systemd. Spotlight (real time indexing and notification) is something I miss in Linux today. 64bit Unix layer on consumer hardware (G5). All of that stuff was not a first ever implementation, of course, but it was well executed and led the way. All of that was more than a decade ago.
Earlier quoted context omitted.
I understand that of course, I'm much more curious why you think this is a concern for people, and/or why you consider this an effective protection against said unknown actors.
I want that feature on cause I dont want stuff I dont know about looking and changing stuff I dont know about, whether it's running with escalated privileges or not
Wouldn't it be far easier to enumerate what you want an app to access?
Earlier quoted context omitted.
A/UX wasn't that much advanced, and most technology interesting stuff in NeXTSTEP, and OS X, is completely unrelated to UNIX.
Off the top of my head: launchd inspired systemd. Spotlight (real time indexing and notification) is something I miss in Linux today. 64bit Unix layer on consumer hardware (G5). All of that stuff was not a first ever implementation, of course, but it was well executed and led the way. All of that was more than a decade ago.
Xenix and Coherent were the first UNIX on consumer hardware.
Earlier quoted context omitted.
Off the top of my head: launchd inspired systemd. Spotlight (real time indexing and notification) is something I miss in Linux today. 64bit Unix layer on consumer hardware (G5). All of that stuff was not a first ever implementation, of course, but it was well executed and led the way. All of that was more than a decade ago.
You may argue that Quartz inspired Wayland, but I wouldn’t be so sure, maybe that was just obvious given the hardware of today.
Amiga, Atari, BeOS, OS/2, Windows, classical Mac OS,...