gbN025tt2Z1E2E4

We see it differently. Exodus is useful in this capacity as much as any other, similar base os image or not for preventing overwriting.

I explained a bit here in my reply to your other comment:

https://news.ycombinator.com/item?id=39243450

COPY --from=ugit-ops /usr/lib/libpcre* /usr/lib/

COPY --from=ugit-ops /usr/lib/libreadline* /usr/lib/

COPY --from=ugit-ops /lib/libc.musl-* /lib/

COPY --from=ugit-ops /lib/ld-musl-* /lib/

No, what I'm saying is you're blanket copying fully different versions of common library files into operating system lib folders as shown above, possibly breaking OS lib symlinks and/or wholly overwriting OS lib files themselves in the process for _current_ versions used in Alpine OS if they exist now or in the future, potentially destroying OS lib dependencies, and also overwriting the ones possibly included in the future by Alpine OS itself to get your statically copied versions of the various CLI tools your shell script needs to work. The same goes for copying bash, tr, git, and other binaries to OS bin folders. No No NO!

That is _insanely_ shortsighted. There's a safe way to do that and then there is the way you did it. If you want to learn to do it right and are deadset against static binary versions of those tools for the sake of file size, look at how Exodus does it so that they don't destroy OS bin folders and library dependency files in the process of making a binary able to be moved from one OS to another.

Exodus: https://github.com/intoli/exodus

This is why I'm saying your resulting docker image is incredibly fragile and something I would never depend on long-term as it's almost guaranteed to crash and burn as Alpine OS upgrades OS bins and lib dependency files in the future. That it works now in this version is an aberration at best and in reality, there probably are things that are broken in Alpine OS that you aren't even aware of because you may not be using the functionality you broke yet.

OS package managers handle dependencies for a reason.

I can appreciate the work to shrink the image, but copying the various standardized CLI tools and related library files into the image versus installing them with APK can introduce _many_ compatibility challenges down the road as new base Alpine versions are released which can be difficult to detect if they don't immediately generate total build errors. Using static binary versions of the various CLI tools would be a better approach here, which inevitably means larger base binaries to begin with, again ballooning the docker image size... all for a minimal gain of 14MB overall is not worth it for a production build unless you're working in the most minimal of minimal embedded OS environments, which the inclusion of FZF -and- findutils would already seem to negate since there is so much duplication in functionality between the two tools already.

Overall this approach results in an image so fragile I would never use the resulting product in a high-priority production environment or even just my local dev environment as I want to code in it, not have to fix numerous compatibility issues in my tools all over 14MB of space.

Tons of them, why? Lots of QNAP apps are written in python, django, and use sqlite.

Fantastic to see this project... hopefully they'll remove all the enterprise cloud and MDM related requirements for using various browser policies (MetricsReportingEnabled,EnterpriseRealTimeUrlCheckMode, etc) along with a re-enabling a few policies that were annoyingly deprecated like the NTP related settings, HomepageIsNewTabPage, HomepageLocation, and easier side-loading of local extensions sources.

This seems like it takes something simple and makes it much more complicated with the aim of making it simple and then fails on all counts. For example, how is this different/better than simply using version controlled docker-compose files instead of flat single image dockerfiles?

This is adding yet another abstraction layer on top of docker which is already a convoluted space with numerous options available. Additionally, the "Balanced control between App Devs and Operators" tagline makes me wonder how "operators" would have a better awareness of how a deployment should operate versus the developers themselves. The developers should be creating their solutions based on previously defined security constraints and compliance requirements, so what "balanced control" is being shifted around here?

Twitter will be fine. The only people going to threads are virtue-signaling losers that won't be missed anyway.

Sad to see your company going away. Your boxes were great for hosting Plex servers.

Grats on the sale either way.

That's a shame, I was hoping YouTube was going to go all-in with their ad blocker bans at the same time since I would have been hit by that too. The amount of time I've gotten back from no longer wasting time reading tweets since I refuse to create a Twitter account has been absolutely wonderful. I'm looking forward to ditching all the wasted time on YouTube soon as well. These companies don't have a clue.

> "The once-secret program — created after the 9/11 attacks and described by intelligence officials as crucial to stopping overseas hackers, spy services and terrorists — has long faced resistance by Democrats concerned that it could trample on Americans’ civil liberties."

I guess that's why the Democrat Obama opened up access to all NSA raw sigint data to every other federal law enforcement agency (all 16 of 'em) before leaving office. His final f you to American citizens as president (officially). Because he was soooooo concerned about trampling on citizen civil liberties... Right.

Give me a break... the article is obviously a leftist hit piece against the right.

In my experience, a lot of millenials that constantly talk about traveling and how it "fulfills" them are generally trying to replace that empty feeling not having kids has left them with. It's a biological imperative, after all. The one constant you typically hear from people with kids: "i'm exactly where i should be in the world."

Good looking out, I was going to cancel the other day and losing access to all my audiobook content WAS the impression I got, which caused me to hesitate. After reading your comment, I've gone and cancelled and yep, still have access to all my stuff. Fuck dark pattern bullshit.

Agreed, though I combine using Little Snitch with Radio Silence: https://radiosilenceapp.com

Little Snitch is great for when I want hyper granular control of a specific app's network permissions while Radio Silence gives me a super quick way to just block EVERYTHING for a particular app right away without even opening it the first time.

That's fine, so just make it a right-click menu service item versus automatically enabling it globally for every image across the entire OS by default for everyone. I know lots of security folks who find it useful storing malware code as an image for reference since that was relatively safe to keep around since it couldn't be accidentally executed and/or being flagged by anti-virus apps. Suddenly macOS was reading that code and introducing a whole new avenue for security vulnerabilities.

That's wrong, it is NOT off by default for everyone as I had to disable it on all my machines and I never explicitly enabled it (and never would).

CloudFlare already has it's hands on unsettlingly large amount of global internet traffic, so why Apple would think anyone would be ok with them also seeing VPN traffic without user consent is beyond me.

> iirc Private Relay doesn't get enabled automatically at all?

That's incorrect, private relay -did- get enabled automatically on all my machines without my express permission or consent. Same goes for the "hide my email" functionality recent macOS versions have included in the mail app.

I've found I have to regularly monitor the configuration setting for iCloud-related services in System Preferences as Apple has a bad habit of auto-enabling new features like Private Relay without explicit user consent. Just because I want ONE app to use iCloud Drive for file sharing across devices seems to indicate to macOS that I want to automatically allow every other app (BY DEFAULT) to be allowed to use iCloud Drive. Such is definitely not the case, I can assure you.

"Live text" where macOS automatically reads the text in images to make it selectable (as if anyone asked for that) also represented a privacy nightmare like the above services, so that along with iCloud private relay and hide my email are all on the list of IMMEDIATE disables after every new macOS install for me.

And the amount of times I've had to again re-disable the auto-uploading of the Desktop & Documents folders on my parents macOS machines is pretty disturbing and quite frustrating for my parents too, who also never wanted a huge bulk of the files on their machines to suddenly be offloaded to Apple's cloud without their explicit consent.

> ...appear to have removed websites that promoted bigotry or hate, etc.

This is exactly the problem. I don't go to a domain registrar to be my parent and/or make social decisions for me. I go there to register domains and manage DNS records, that's it. That Squarespace management felt the need to assert themselves into that process with social contagion related matters is deeply concerning and frankly, a deal breaker for me. It'd be like AT&T cancelling your phone service because they didn't like the content of your conversations.

I don't like businesses I haven't specifically chosen managing my digital affairs and buyouts put me in that position. Plus I don't trust Squarespace at all.

Fortunately this is the last Google product I was still using, so after this migration I will be 100% google free, which will be a great day.

It's already happening for years now. Just look at Stadia.

Jeez, could they have possibly given less notice? Now I have to scramble to migrate all of my domains away from Google/Squarespace this weekend. Damn it.

I have zero desire to be in business with Squarespace.

> an incredibly safe vaccine

yeah, i'm going to need you to prove that statement by showing me the standard 10-12 year safety studies available for those "incredibly safe" mRNA vaccines.

So the solution to the banking collapse is to create even MORE too-big-to-fail monopoly banks? The corruption has gotten so far out of control at this point it's laughable.

Not that hard to believe when you consider the hardware specs for Apple machines are so heavily locked down to a very specific set of mobo, cpu, and only variability in core count, ram amount, hard drive size, etc.

It's not like PC world of mix and match everything.

For a sizable segment of Apple's power users, this is really the core issue.

Apple clearly has no love for power users for over half a decade, and thinking of going to windows after MacOS is a nonstarter, which really leaves the obvious choice being migration to linux until you start to seriously evaluate PC laptops along with realizing you're taking the onus of OS configuration on yourself ALONG WITH your work, as the previous commenter mentioned. That said, Ventura is such a bad MacOS release (and sign of things to come) that Apple has finally made it the pull off the band-aid moment for a lot of power user folks like the writer of the article, issues be damned. good -enough- will have to suffice.

It's so tiresome that every single release of MacOS has fewer features professionals actually care about.

Man.. I really miss Steve. He never would have let this bastardization of the desktop machine operating system happen. The only thing consistent with every new macOS release at this point is the removal of more features I heavily relied on and the addition of ever more iOS transplants that make zero sense in the context of a desktop computer.

The social media equivalent of fuzzing basically.

> Your opinion and the actual growth rates do not seem to be in agreement.

Believe me or not, it makes no difference to me. I know I'm right.

Even the resident HN golden boy Elon Musk has been very outspoken recently about his significant concerns regarding the forthcoming population collapse. So it's happening whether you want to acknowledge it or not.

> Like, the romans and the greeks were a lot more sexually free than we are right now.

I wouldn't recommend using collapsed civilizations as the beacon for what's good and right for a healthy and well-functioning society.