News for hackers. Stuff that matters.

christux

christux on Hacker News

Re:Ask HN: Can tux.io rely on LXC's security? on Tuesday May 02, 2017 @08:45AM (#14245887)
Thanks for your comment.

There is only one user, tux, which is uid 1002 and tux does not exist in the host's /etc/passwd.

The users do not have root access in the containers.

Cgroups is used to impose limits on RAM, number of processes, visible CPUs, etc.

I made this site in evenings and weekends, and have put it up for the public to use. I want find out sooner, rather than later, if the whole idea is flawed.

Re:Show HN: Tux.io – a (now working) Linux desktop in your browser on Tuesday May 02, 2017 @07:55AM (#14245605)
Thanks and sorry, not yet. Email [email protected] if you want this to be considered for the road-map.

Ask HN: Can tux.io rely on LXC's security?

Posted by christux on Tuesday May 02, 2017 @07:08AM
from the ask-hn dept.

http://tux.io relies on LXC's security - it gives the public access to non-root desktops in LXC containers.To date, the worst that has happened are fork bombs. (For which I now have a solution.)Is it safe to rely on LXC's security, provided that I keep the containers and hosts patches?

( Read More... | 3 comments | 2 points | on HN )
Re:Show HN: Tux.io – a Linux Desktop in your browser on Wednesday April 19, 2017 @09:06AM (#14147393)
http://tux.io is back online now, after extended defensive development.
Re:Show HN: Tux.io – a Linux Desktop in your browser on Wednesday April 19, 2017 @09:05AM (#14147390)
https://tux.io is back online now, after extended defensive development.
Re:Tux.io – a Linux Desktop in your browser – second try on Tuesday April 11, 2017 @08:17AM (#14086960)
Thanks for taking the time to try this.
Re:Tux.io – a Linux Desktop in your browser – second try on Tuesday April 11, 2017 @08:15AM (#14086943)
I'm sorry you're experiencing difficulties. Could you let me know the operating system and version which you are using?

What do the "#\" symbols in your report mean?

Re:Tux.io – a Linux Desktop in your browser – second try on Monday April 10, 2017 @08:15AM (#14077829)
Try going to https://ca0.tux.io if the European site is too busy due to this ShowHN.
Re:Tux.io – a Linux Desktop in your browser – second try on Monday April 10, 2017 @08:12AM (#14077802)
Sorry for posting twice in a week, but I had to take the site down half-way through the first ShowHN. https://news.ycombinator.com/item?id=14044541
Re:Show HN: Tux.io – a Linux Desktop in your browser on Monday April 10, 2017 @08:08AM (#14077788)
I have implemented some fixes and the site is up again.
Re:Show HN: Tux.io – a Linux Desktop in your browser on Wednesday April 05, 2017 @05:15PM (#14045696)
Thanks to everyone who tested this. I am now shutting the servers down for a few days, while I consider the feedback I've received.
Re:Show HN: Tux.io – a Linux Desktop in your browser on Wednesday April 05, 2017 @04:22PM (#14045273)
What features would you like to see added? I had been planning to delete the data from VMs which had not been used in the last 30 days, but I will reconsider this now.
Re:Show HN: Tux.io – a Linux Desktop in your browser on Wednesday April 05, 2017 @03:49PM (#14044998)
Fixed it.
Re:Show HN: Tux.io – a Linux Desktop in your browser on Wednesday April 05, 2017 @03:23PM (#14044779)
Thanks. I have no plans yet re: open-sourcing. I just made a thing and am asking whether it has a use. Can I ask why it is cool? Could it be useful?
Re:Show HN: Tux.io – a Linux Desktop in your browser on Wednesday April 05, 2017 @03:17PM (#14044741)
Sorry, just live debugging a crash on de0.tux.io...
Re:Show HN: Tux.io – a Linux Desktop in your browser on Wednesday April 05, 2017 @03:09PM (#14044684)
Thanks to all who are trying this, and apologies to those who cannot connect - I've written the servers to deny new connections when the load average is too high.