Hacker News Reader

moondevon Show HN: Edka – Kubernetes clusters on your own Hetzner account

Cluster-api project is what you want. It's the holy grail of cluster lifecycle.

moondevon Ask HN: Why is virtualization still not solved?

8GB RAM and 4 performance cores?

moondevon Incus – Next-generation system container, application container, and VM manager

I've kicked the tires on many CAPI providers throughout the years, what you have here rivals CAPA and CAPV. Even CAPK (kubevirt) only recently fully implemented ClusterClass, and there are no classy templates in the release yet.

I have actually learned quite a bit just reading your gitbook and workflows.

This provider is also great because it sits in the space of fully on-prem and fully self-hosted. Kubevirt is also here but it needs an additional provider to be able to fully pivot and manage itself.

I'm quite interested in your machine image pipeline and how you publish them on simplestreams. I'm working with MaaS and really want to implement the same pattern you have, pushing to a central location and let MaaS sync. It's very painful needing to manually import the images beforehand and handle garbage collection.

Would your Incus and KVM images work with MaaS as well? If there is a better approach I am all ears.

Thanks again for sharing your fantastic work with the community.

moondevon Incus – Next-generation system container, application container, and VM manager

All good and i'll cheers you on the composability of k8s for sure

moondevon Incus – Next-generation system container, application container, and VM manager

> I can say with certainty that it's not likely, it unconditionally does. That's not to say address re-use isn't possible over a long enough time horizon, but that bookkeeeping is delegated to the CNI

You are 100% wrong then. The kube-ovn CNI enables static address assignment and "sticky" IPAM on both pods and kubevirt vms.

https://kubeovn.github.io/docs/v1.12.x/en/guide/static-ip-ma...

moondevon Incus – Next-generation system container, application container, and VM manager

Proxmox feels like a more apt comparison, as they both act like a controlplane for KVM virtual-machines and LXC containers across one or multiple hosts.

If you are interested in running kubernetes on top of incus, that is your kubernetes cluster nodes will be made up of KVM or LXC instances - I highly recommend the cluster-api provider incus https://github.com/lxc/cluster-api-provider-incus

This provider is really well done and maintained, including ClusterClass support and array of pre-built machine images for both KVM and LXC. It also supports pivoting the mgmt cluster on to a workload cluster, enabling the mgmt cluster to upgrade itself which is really cool.

I was surprised to come across this provider by chance as for some reason it's not listed on the CAPI documentation provider list https://cluster-api.sigs.k8s.io/reference/providers

moondevon Helm local code execution via a malicious chart

This is like blaming python problems on yaml because someone embedded a python script in a multiline string.

moondevon Helm local code execution via a malicious chart

The funny thing is helm is as good or bad as what you make it. When folks complain about helm they are actually complaining about their own self created charts or poor selection of charts they install.

moondevon Helm local code execution via a malicious chart

I like wrapping with kapp for this. However kustomize still skips hooks if you inflate a chart that uses them and there is value in discoverability of helm apps installed with clear versioning

      kustomize build | kapp deploy -a my-app -y -f -

moondevon Is an Intel N100 or N150 a better value than a Raspberry Pi?

I have several asrockrack mobos and this is the first time I am hearing of asrockind, very interesting and there are a TON of different models here

Do any of these asrockind machines have a BMC?

I just got a minisforum s100, it's 4c8g n100 and POE which is pretty sweet. If only it had Intel vpro or some sort of BMC it would be perfect. I can attach a pikvm but looks like I need to do surgery on it to interface with the power switch. WakeOnLan has been really unreliable in my tests so far.

moondevon Mini NASes marry NVMe to Intel's efficient chip

You can install truenas Linux on the flashstor12. It has no GPU or video out, but I installed a m.2 GPU to attach a HDMI monitor

moondevon Mini NASes marry NVMe to Intel's efficient chip

Looks like it only draws 45w which could allow this to be powered over POE++ with a splitter, but it has an integrated AC input and PSU - that's impressive regardless considering how small it is but not set up for PD or POE

moondevon What would a Kubernetes 2.0 look like

I was all ready to complain about HCL because of the horrible ergonomics of multiline strings, which would be a deal breaker as a default config format. I just looked though and it seems they now support it in a much cleaner fashion.

https://developer.hashicorp.com/terraform/language/expressio...

This actually makes me want to give HCL another chance

moondevon macOS Tahoe brings a new disk image format

https://developer.apple.com/documentation/virtualization/vzd...

I guess this is the Apple version of qcow2 and friends

moondevon Online sports betting: As you do well, they cut you off

I've never seen anyone kicked out for martingale. They don't need to because they enforce a min and max bet. Also 0 and 00 everywhere

moondevon Armbian Updates: OMV support, boot improvents, Rockchip optimizations

Raspberry PI and Nvidia AGX

https://github.com/pftf/RPi4

moondevon Armbian Updates: OMV support, boot improvents, Rockchip optimizations

https://developer.arm.com/Architectures/Unified%20Extensible...

moondevon Daily driving a Linux phone, but why?

I have a pixel 9 pro, in the android beta there is a "terminal" app that launches a Debian shell inside a VM. You can choose to resize the disk as large as your storage can offer, and all apt aarch64 packages are available including docker. Really impressed with it so far. This is a similar experience to crostini on ChromeOS, but gui apps are not working yet.

I was able to ssh out to one my servers, then ssh into the phone from my desktop forwarding x11. I then successfully launched x11-eyes and a few others. Hopeful that eventually you can run a desktop or at least x11/wayland apps all self contained on the phone. Pretty cool to tinker with for now.

moondevon The Joy of Linux Theming in the Age of Bootable Containers

> Best I can tell, none of the versions are pinned.

From your link, everything is pinned? So a theoretical exploit in a future release of package is not going to exist in this immutable release https://github.com/ublue-os/bazzite/releases/tag/42.20250417

moondevon Ask HN: What's a surprisingly useful tech skill that's underrated today?

If giving a damn makes you stand out, it seems like that would indicate none of your peers or colleagues give a damn. Working at a place where you are the only person that gives a damn feels like torture.

I also wonder how much tangible value can be created by a group of incompetent people that care, compared to a group of skilled people that don't.

moondevon Framework Laptop 12 pre-orders open next week

It's a bummer they discontinued the framework Chromebook, and there is no ChromeOS version of this. Seems like it would be an awesome fit.

It's really cool being able to run android apps on the Chromebook. ChromeOS is really interesting these days, I like "floating" the bambu 3d printing app to easily monitor a print. It's also nice for using the Google photos Android app which exposes additional options that the web version doesn't have. 64G RAM makes ChromeOS really powerful being able to run multiple android apps, crostini, and kvm virtual machines all at the same time.

moondevon Framework Laptop 12 pre-orders open next week

It's a bummer they discontinued the framework Chromebook, and there is no ChromeOS version of this. Seems like it would be an awesome fit.

moondevon Ask HN: Has anyone moved away from Mac?

Have you considered kicking tires on Linux installed on your MacBook?

I have a 2018 Mac mini running Ubuntu well. It actually dual boots macos as well using the refind bootloader. Refind can be installed and booted from a USB key as well so pretty straightforward to try. Make a empty partition from macos for Linux. Then boot Linux iso and install there. Boot refind and you can select which os to use. The 2018 mini even supports esxi and windows if you want to quad boot

moondevon Debian bookworm live images now reproducible

Do these live images come ready with cloud-init? A cloud-init in-memory live iso seems perfect for immutable infrastructure "anywhere"

moondevon VMware turns its back on small businesses: 72-core license policy backlash

This has nothing to do with virtualbox. VMware workstation is the desktop product and is given away for free since it's practically insignificant to the portfolio.

This is all about managing and deploying applications across multiple servers (vSphere) which is a fleet of computers running ESXi as their operating system.

moondevon Nvidia DGX Spark

Nvidia DGX and HGX servers packed NVME, 8 H100 GPUs and 8 Infiniband cards don't run a desktop. They don't even have an HDMI port.

moondevon Nvidia DGX Spark

"ConnectX-7 Smart NIC"

https://resources.nvidia.com/en-us-accelerated-networking-re...

So those two QSFP ports can be configured for 400GbE IB and/or RoCE?

Also is it fair to say that this can run a desktop considering it has an HDMI port?

moondevon Apple has locked me in the same cage Microsoft's built for Windows 10 users

ChromeOS allows you launch a Linux terminal app which runs a shell inside a VM. There are no "entitlement" limitations to what you can do in it, while the base system remains isolated. For example you can launch a MacOS vm with qemu.

moondevon xlskubectl – a spreadsheet to control your Kubernetes cluster

Now it just needs a kubectl plugin to launch Google sheets webpage with carbonyl for e2e terminal use

moondevon Apple M3 Ultra

> support for more than half a terabyte of unified memory — the most ever in a personal computer

AMD Ryzen Threadripper PRO 3995WX released over four years ago and supports 2TB (64c/128t)

> Take your workstation's performance to the next level with the AMD Ryzen Threadripper PRO 3995WX 2.7 GHz 64-Core sWRX8 Processor. Built using the 7nm Zen Core architecture with the sWRX8 socket, this processor is designed to deliver exceptional performance for professionals such as artists, architects, engineers, and data scientists. Featuring 64 cores and 128 threads with a 2.7 GHz base clock frequency, a 4.2 GHz boost frequency, and 256MB of L3 cache, this processor significantly reduces rendering times for 8K videos, high-resolution photos, and 3D models. The Ryzen Threadripper PRO supports up to 128 PCI Express 4.0 lanes for high-speed throughput to compatible devices. It also supports up to 2TB of eight-channel ECC DDR4 memory at 3200 MHz to help efficiently run and multitask demanding applications.