jaekash

> I've tried both podman and lxd with success but I'm curious, what do you use a tool like that for, mostly?

I use podman for dev and test environments, CI and CD workers and testing OCI containers that I eventually deploy in K8S. No production use cases. Hoping to soon see K3S working inside podman though, and then I would use it for deploying K3S :)

I assume you are referring to the Democrat controlled US House passing a resolution with bipartisan support and a 398-17 vote which condemns BDS[1].

BDS is still allowed to operate and the condemnation has no state-actionable consequences against BDS. And there are members of the US congress who openly support BDS.

[1]: https://www.nytimes.com/2019/07/23/us/politics/house-israel-...

Corporations getting rich off the CCP's action siding with the CCP is hardly surprising.

Very true in this case, if it was not for US foreign policy choices China would not be the problem it is today.

Sometimes USA still manages to do the right thing it seems.

> But for at least Portugal and Greece, and maybe Italy and some eastern European countries, the ally is china since 2014?

Maybe financially, but not ideologically. Not sure how far this "allegiance will hold".

> Maybe the long term resolution involves recognizing that even if China is totalitarian, it's only within it's own borders.

If it was not for china North Korea and possibly Pakistan would not have had nuclear weapons now. So no, it is not just in it's own borders.

Deferred action is better than nothing, but yes, I would prefer it happened immediately also.

And we already know China has been backdooring other equipment: https://www.bloomberg.com/news/features/2018-10-04/the-big-h...

So yes, this is a small victory in a massive war.

> When a fifteen year old can be put into prison for years in some U.S. states for some weed it hardly makes makes the U.S. look like it values human rights.

Would like to see some examples of this, and numbers of this. I really doubt this is widespread.

And further, if it does happen, it would have to get through prosecutors, jury, governors, etc - all of who will completely eaten alive by the press if the kid could even be misinterpreted to be a minority in the USA and the whole world would know about it. Where if someone mentions China is not exactly a good actor we get a whataboutism shitstorm.

It is a bit weird that there are whole movements like BDS setup against Isreal, a wholly democratic and liberal country where people of all religions enjoy the same rights and nobody is placed in concentration camps, while every time someone mentions that China is a bad actor we get asked why does BDS not exists.

BDS does exist, and China is a bad actor and should be opposed.

> You can always tweak law to make criminal out of anyone inconvenient.

And this would be immoral and if you are suggesting the US is doing this you would need to actually back that up.

> Wasn't Assange's consensual sex relegated to rape?

Even if it was, that is not an example of tweaking the law to make a criminal out of anyone inconvenient, it is a case of tweaking the truth to fit the definition of something which is a crime, and should be a crime.

> value-systems are only 'values' and a 'system' when they are well-defined and consistently applied.

I get what you are trying to say but definitely a value system requires neither of those things.

> So most of the planet will only buy thise elaborate line when Saudi Arabia and Pakistan get told to keep their riches.

There is hypocrisy but the threat posed by China to the liberal world order is much more serious than the thread posed by Saudi Arabia and Pakistan, and in both those cases there is a bit of a deal with the devil.

If the Saudi and Pakistani regimes fall we will probably see much worse things popping up.

> Many people in prison in the US did not commit crimes;

By all means cite %, and still does not make it a concentration camp.

Further the DAs are themselves elected locally in many jurisdictions or appointed by locally elected officials and people can vote for change if they want it.

> Every nation does this with their indigenous population.

And it is always wrong.

> Yet you don't seem to be outraged at the fact native americans are raped and murdered almost everyday in america.

Not under sanction of the state, and Non native americans are also raped and murdered almost every day in america. These things are crimes in USA regardless of the victim, where in China the state is sanctioning it and doing it.

So where are the uprisings about china?

A prison is not a concentration camp, US has a justice system with the right to trial and appeal, and if the people in prison actually committed crimes then I'm not sure what the problem is.

> I'm constantly seeing westerners whine about Chinese human rights violations while simultaneously ignoring the HR violations occurring everywhere else, especially in the west. American cops routinely kill people.

There has been protests for more than a month in the USA and the west because one black man was murdered by police. The police officer that murdered him will be charged and brought to justice.

There has been nowhere near this level of outrage against the actions of China, and nobody will bring the perpetrators there to justice.

To suggests that HR violations in the west is being ignored is laughable and dishonest and is evidence of your ulterior motives.

The only way this makes sense is abstract of any value judgements, and yes sure, if we in the west ignore that everything about the Chinese Communist Party and how it conducts itself is an affront to our values then it makes no difference. But we are humans, we have values, we make value judgements.

> If China liberalises tomorrow none of the fundamental issues will change and China will still be a threat to the US. The only thing that will change is that the US will have to find something else in order to label China 'evil'.

Cite please. And won't the best way to debunk the "propaganda" be to just liberalize right? So ... everybody is waiting and has been waiting for decades, China should stop making excuses and get on with it.

> While podman can run systemd inside a container, it isn’t widely adopted in the images in docker hub and elsewhere.

With podman and rootfs it's also normal to run a full systemd inside a container and you don't need special considerations from OCI images for rootfs to work just fine.

> There is probably just fedora supporting this.

RHEL is behind podman and I will take RHEL support over Canonical every day.

Podman is also available on most major distros and easy to port to new ones without requiring someone to use some proprietary crapware solution like snappy.

> LXD feels like it's at a point between LXC and K8s, but I'm not sure how many real-world systems want to be there.

I would suggest give podman with --rootfs a try.

> 1) It's strongly connected to Canonical and Ubuntu. This is mostly a matter of perception and it is an actual community project. However, I can understand people not feeling comfortable with "snap install lxd".

Last time I tried it on Fedora it did not work (less than 6 months ago).

Also it offers nothing I want over podman with --rootfs

> And you're good to go.

If you opened the first link I shared you would see more is needed than this, which is why I linked to something explaining both this and the additional steps needed.

> Six months after agreeing it could have a limited role, ministers look set to exclude the Chinese company, with no new equipment installed from next year.

Best news in some time, good thing Washington applied pressure on UK to do the right thing here.

That headline is digital gold.

Calling sysv style init scripts with no error checking from systemd unit files is a joke on Canonical, not any other distro.

In that sense docker is also "rootless". Won't be surprising if Canonical does not understand the words they use.

EDIT: actually I find no claims that LXD/LXC supports rootless containers, I think the person claiming it does just don't understand it, would like to see a citation for it.

> I do it with a chroot bash script for Ubuntu server atm, but hopefully there's a debootstrap kind of thing on redhat that I can use as a base.

There are ways to do chroot installs on RHEL but sadly not well documented.

Some resources on this:

- https://glacion.com/2019/06/16/Fedora.html

- https://github.com/glacion/fedora-chroot-installation

- https://web.archive.org/web/20150912004438/https://wiki.cent...

Most of that will work for RHEL with some minor modifications.

Pity it is not better documented.

> Many things are easier in LXD, like building a highly available, fault tolerant cluster of container and vm-instances.

What features of LXD enable fault tolerance and high availability?

> It's more secure by default than an equivalent Docker or Kubernetes based system as it runs VM and Containers in user namespace

What is the basis for this claim? K8S and Docker also runs everything in user namespaces by default, so why is LXD more secure?