jansommer

But which of those IP ranges are used by the "runners" as discussed here https://discuss.hashicorp.com/t/is-there-a-list-of-source-ip...?

Not really related to this tool, but Terraform: We are hiding a few services behind a vpc and they are therefore not reachable by Terraform Cloud without the Business plan which is required to get an agent we can install within the vpc. I cannot use ip restrictions because HashiCorp doesn't expose their ip's. I filled out their contact form 7 days ago and they haven't returned yet. It's likely just a matter of waiting a bit longer, but being this dependent on one organization for our entire infrastructure is starting to get a bit frightening, especially if it's going to take months before their sales department get the time to reach out.

The obligatory comment to these posts is always "check out PostgREST". We use it for all frontend api's. Combined with Node or any other middleware, we add additional code if everything can't be done in plpgsql, but requests are usually just passed straight through Node.

Microservices are good when one programming language is better at solving something than another. Eg. Python is what data scientists use for machine learning, but I'm not going to build the entire backend in Python just because of that. C# is great for gluing things together and integrating with enterprise systems due to good support for wsdl, and the type system and tooling is excellent, as well as the pool of developers proficient in the language. Postgres/SQL is excellent for business logic, and can act as a kind of monolith. Other languages such as Go are great for a custom reverse proxy when Nginx is insufficient. And having the services seperated means one can crash without affecting the others (Erlang got this right, but I wouldn't build 100% of a system in that because of the reasons just mentioned). I like how microservices allow me to use the right tool for the job.

Had the exact same experience. Was planning to use Ansible until it became obvious that Kubernetes was a perfect match, and it was fairly easy to learn the basics. Getting it to run correctly within our VPC was a pain for the developer doing that part though.

May I ask why you wish there was only one? I'm researching JSONiq on a hobbybasis and am curious about all sorts of experiences with it

I would really like to use JSONiq as well, XQuery for JSON. It's such a beautiful language. Eagerly following along the development of RumbleDB and hoping to extract JSONiq from that one day (there's also support for XQuery)

I have the same experience. If cross platform loading of environment variables and shell scripting is needed one can use Powershell. Together with Windows Terminal and tmux for Linux and Mac, you can start every microservice in different panes and tabs. You won't get the full Docker experience where you know for a certainty that your code will run the same way in production, but leave that to ci/cd, perhaps a local kubernetes cluster you can use for production-like testing.

That's awesome, I stand corrected!

You can create a unikernel with Python - it's one of Unikraft's examples, but you won't be able to pip install modules out of the box.

Unikraft is good if you want to run untrusted code, giving a way for developers to extend functionality on your platform in Python (or JavaScript if you use Ducktape, also in their examples) - kind of like AWS Lambda and the likes. Besides the added security from running in a virtual machine, unikernels boot extremely fast. Without applying any optimizations, I have a QuickJS unikernel that boots, runs JavaScript and shuts down within 400ms (running in Windows -> VMWare -> Linux -> KVM+QEMU). This performance would be hard to get with Docker and a Linux distro.

When someone is that kind of person, they likely don't have many relationships, but a lot of time. I'd be surprised if that person wasn't good at their job, and if not, what motivated grandparent to put so much effort into trying to heal what seems like a fundamental distrust in other people.

"Deno can store and check subresource integrity for modules using a small JSON file." - https://deno.land/manual/linking_to_external_code/integrity_...

If you don't need Linux, there's also Unikraft[1]. It's great for building tiny operating systems. It was fairly easy to port QuickJS, and having an OS that can run untrusted code in QEMU+KVM within 400ms is pretty cool (total time it takes for the OS to boot, run JavaScript and shut down in Linux running in VMWare)

[1] http://www.unikraft.org/

It doesn't work for automatically deployed virtual machines that one would like to be connected to the vpn without interaction. You'll need to do a manual login before you can disable key expiry.

Tailscale is incredibly simple to set up, and just worked when I connected a Google Cloud VPC+subnets. One problem though: There's no way for a server to maintain an auth token for more than three months. You have to manually renew it.

May I ask why? Is it because Kotlin doesn't bring much new to the table besides fixing a few minor annoyances with Java? I have the same feeling, but can't put my finger on why exactly Kotlin seems unnecessary, except that it's a modern language that doesn't have union types.

I'm not surprised the author can't convince LinkedIn to change anything. Had a similar experience with Tinder where Paying in their web application using a danish credit card failed because their cc service returned "visadankort", which had to be changed to "visa" through the developer console for the payment to go through. Got tired of that and filed a bug. Oh the battle it took to actually convince them that an entire country is unable to pay in the web app using their de facto credit card.

If that's all you need, it wouldn't make sense to include SQLite in the browser. If you're going to include a relational database you might as well use it

It would! But it would also be a security nightmare. Exploit SQLite and you could use it in Safari, Chrome and Firefox - everybody could be affected.

Damn, didn't know $1750 was low. I got something similar for reporting an exploit to Microsoft, where opening an attached ICS/calendar entry in Outlooks web client allowed me to execute arbitrary JavaScript on outlook.microsoft.com as the current user. Should have asked for more!

RabbitMQ also made Ra[0], an Erlang implementation of Raft[1]

[0] https://github.com/rabbitmq/ra

[1] https://raft.github.io/