ymse

> Now it really suffices if make triggers a target if one of the inputs changed.

This is exactly how Nix and Guix works. If any inputs change, it will force a rebuild of all dependent packages.

GNU Guix is also working towards full reproducibility, and has an up-to-date (but incomplete) list at https://www.gnu.org/software/guix/packages/reproducibility.h...

Here's a smørbrødliste:

* Non-isolated build environment. This is just asking for all sorts of trouble (users, hostname, network access, etc).

* File system time stamps.

* Recording times in the build process (although even gcc supports SOURCE_DATE_EPOCH since version 7).

* Usage of CPU-specific instructions, e.g. -march=native to GCC.

> But don't push notifications basically work over a long lived connection? Of course it's better to have just one long-lived connection to Apple instead of one for every communication App, but in the end if you want real time signalling in a mobile environment you won't get around a long lived connection, don't you?

I think part of the convenience is on the server side. The server also only maintains a single connection to Google/Apple, instead of keeping millions of idle ones.

> There's not much by way of generic CI tooling that's designed with email in mind (I'm working on this!).

I am interested in learning more about this. Can you share some details? Is there a prototype?

Vivaldi is allegedly free software: https://vivaldi.com/source/

`powertop --auto-tune` will turn all power-related settings to their most conservative settings. You can adjust them individually by running `powertop` interactively afterwards.

I would love to see power estimates before and after that command! In my experience it increases battery time by 30-50%.

OK Go really do make some amazing music videos. The Rube Goldberg machine [0] one is particularily impressive. It even got its own TED talk [1].

0: https://www.youtube.com/watch?v=qybUFnY7Y8w

1: https://www.ted.com/talks/adam_sadowsky_engineers_a_viral_mu...

Amusingly, as someone who has first-party cookies disabled by default, those annoying "we use cookies" notifications appear every time instead of just the first.

Way to go EU..

OpenBSD includes a hypervisor nowadays.

http://man.openbsd.org/OpenBSD-6.0/man4/amd64/vmm.4

I didn't downvote you, but even my Macbook friends were jealous of my 20+ hours on a Thinkpad x250 (9-cell).

The default power settings on Linux are pretty bad, though. Anyone with Linux on their laptop should create a boot service that runs this command:

    powertop --auto-tune

...and observe battery time increase by ~25%.

The quote is attributed to Napoleon, who surely saw his fair share of incompetent generals. It should really be called Napoleons Razor to fall in line with Occam.

Who is this Hanlon guy anyway.

Ha, that's timely. I started writing an online tutorial just today and settled on org-mode. Reading your config is immensely helpful. Thanks!

This is true. It's more of a DNS MITM protection rather than privacy fix. There are other uses of DNS than just HTTP(S) traffic though: but I'm sure these mass surveillance entities sit on massive reverse DNS databases anyway, rendering the effort mostly useless.

For privacy concerned netizens, especially UK based ones, I highly recommend checking out DNSCrypt[0]. It securely tunnels all your DNS requests to an endpoint of your choice.

I've used it for about two years and it's very reliable, even on a laptop. I do recommend using it in conjunction with a caching DNS recursor such as Unbound[1] to save bandwidth.

It also works great on OpenWRT if you have that luxury.

For UK residents, please also consider changing to an ISP that cares about your online rights. I only know this one: http://aaisp.net.uk

0: https://dnscrypt.org

1: https://unbound.net

Just a shout-out to the fine folks over at CopperheadOS[0]who have been doing a lot of behind-the-scenes hardening in Android over the last year[1].

If you have a Nexus device and don't care much for the Play Store applications (F-Droid is included) give it a go for a true AOSP experience.

The only apps I'm really missing are Tasker and Signal, but I have a second phone for those.

0: https://copperhead.co/android/

1: https://copperhead.co/android/docs/technical_overview

YAML is a pain to parse. And as a human, having to remember quoting string values like "yes" and "on" to prevent them from being interpreted as booleans in YAML really grinds my gears. I don't care if it's prettier; YAML can't disappear quick enough.

I wrote a haiku some years back to demonstrate how broken the Ruby implementation was.

    YAML:
      takes a no for a 'no': no
      spring,summer,fall,winter: 3,6,9,12
      the game is: on

Running it through ruby 2.3.1 yields..

    {"YAML"=>
      {"takes a no for a 'no'"=>false,
       "spring,summer,fall,winter"=>36912,
       "the game is"=>true}}

That's a really good point. I opened an issue: https://github.com/toml-lang/toml/issues/429

How has it declined?

What you are describing is basically Openstack. Although Hanlons razor applies, none of the current actors stands to benefit from improving the situation.

* Extremely difficult to set up.

* Claims that half of Fortune 100 uses it (read: many are required to support it; the rest have one guy with a toy installation in some branch office).

* Consists of dozens of components, each with several-thousand lines config files (actually Python code) that must be kept in sync between all nodes (yet have node-specific data).

* Claims to be "modular", but have complex interdependencies between each of the components.

* Upgrading is not officially supported, but some companies will help you.

* Will break in mysterious ways, and require you to backport bugfixes since you're stuck on an unsupported version after a year.

* Have unhelpful error messages (e.g. throw Connection Refused exception when you're actually receiving an unexpected HTTP return code).

* Write documentation in a way that appears OK to new users, but vague enough to be useless for those who are looking for specific information.

Oops, didn't see this reply until now. It's no longer recommended to use a SSD cache pool, much for the reasons you describe.

You will be a lot better off using bcache or similar, on top of the OSD device.

> Ceph might be more usable after Bluestore comes along (at the moment erasure coding performance seems to be pretty bad, even with an SSD cache)

I just saturated a 10Gb link in a k=4,m=2 EC configuration on Ceph (Haswell). Too lazy to set up concurrent clients. What do you mean by pretty bad? This is a Hammer cluster without SSD journals or cache.

Bluestore was recently released with Jewel, but shouldn't affect EC performance drastically, if at all.

Don't worry, I was just poorly joking about being intrigued by that product description.. It does sound like an interesting place to work though.

Mind sharing what you do, and/or how you ended up there? :)

Forget Stripe, where do we sign up?

"Strong cryptography only means the passwords must be encrypted while the user is inputting them but then they should be moved to a recoverable format for later use."

Some other Pornhubbers did one 2,5 years ago: https://www.reddit.com/r/IAmA/comments/1un3wn/we_are_the_por...

I don't know. With VX?LANs you need a whole lot of other infrastructure to manage e.g. routes, load balancing or tenant-specific ACLs. By coercing BGP into providing isolation, you can slap on routing, load balancing, ACLs "for free", i.e. managed by the same control plane.

If you just need isolation I agree with you. But I actually find the Calico solution rather elegant when looking at the whole package.

(--System administrator who manages VXLAN on a public cloud)

    fio --direct=1 --rw=write --ioengine=libaio --runtime=300 --bs=4k --numjobs=4 --iodepth=32 --size=2G --name=4096-direct --filename=/dev/vdb --group_reporting

This is my "dd" test for any storage system. Filename can be a regular file; you can also pass --directory instead. I would love to see numbers for both this test as well as with --bs=4M.

Also experiment with --rw=rw|randrw|read :)

(and make sure your device is large enough to hold numjobs*size)

Location: Coventry, UK

Remote: yes

Willing to relocate: yes; anywhere

Technologies: Linux, OpenBSD, Ceph, Ganeti, Openstack, MySQL, Salt, Puppet, Ruby, Python, Varnish, Linux-HA, xCAT, networks, monitoring, git; anything "cloud", sysadmin, devops.

CV: https://hi-hn.s3.climb.ac.uk/mbakke.pdf

Email: See https://github.com/mbakke or CV

Edit: 15 downloads in 30 minutes. Not bad :)