News for hackers. Stuff that matters.

dusanh

    When a thing seals itself against its own destruction, it merely dies a different death.
https://en.wikiquote.org/wiki/Planescape:_Torment#Coaxmetal
Building VMs?
I can map most of the list but I can't recall what would be the "review environment setup" What did you mean by that?
Re:Why Exercise Is a Miracle Drug on Saturday August 02, 2025 @01:26PM (#44769482)
Any recommendations on a rowing machine?
Came into this thread looking for a mention of Steve Mann! Man was ahead of his time. More on his 'Visual Filter' and more here http://www.wearcam.org/ieeecomputer/r2025.htm
Re:Bare metal printf – C standard library without OS on Sunday April 27, 2025 @02:29AM (#43809866)
This sounds fascinating and absolutely alien to me, a Python dev. Any good books or other sources to learn more you can recommend?
Re:Show HN: LinkedIn sucks, so I built a better one on Sunday March 23, 2025 @03:40PM (#43455303)
I apologize this is not directly related to OP, but if you, like myself, get mad at all the "Suggested" posts LinkedIn is pushing on you, you can use the following ublock filter to get rid of these posts:

    www.linkedin.com##:xpath(//span[text()="Suggested"]//ancestor::div/div[contains(@data-id, "activity")])
Combined with carefully managing who I actually follow, it made it for a much more pleasant experience.
Re:Why Senior Engineers Should Stay ICs on Thursday January 16, 2025 @02:03PM (#42729442)
> whereas managers are seen as useful in different domains, giving them practical mobility

And this is exactly my problem with becoming a manager. You become fungible, easily replaceable, movable and fire-able.

Re:Docker Compose Isn't Enough on Wednesday November 13, 2024 @02:12PM (#42128932)
I worked for a medium size company that served, and still is, ~150 clients (some Fortune 500 included) by deploying prod with docker-compose. It can be done.
> the QA env was not actually setup to mirror the production env

As senior QA, this alone is going to end me one day.

> Is the ansible vault password in the repo too?

No no, this is one of those secrets we share among the team and save to KeePass or whatever.

We use Fernet[1] or Ansible vault[2] with the encrypted secrets committed to the code repositories, but I guess we can do that because the code is not public.

The rest we share over a secure, company approved, channel, and save them into local KeePass-es (KeePassXC)

[1] https://docs.ansible.com/ansible/latest/vault_guide/index.ht...

[2] https://cryptography.io/en/latest/fernet/

Re:Why You Should Learn Linux (As a Developer) on Sunday September 01, 2024 @04:17AM (#41415179)
There is also Red Hat and SUSE. And I am pretty sure smaller companies like that exist too. I started my career in just one like that!
The already mentioned The Pragmatic Programmer, 20th Anniversary Edition is so far the best I have read. It's not overly specific to one single thing, it tries to teaches general principles and good practice.[1]

I also have a personal recommendation for when you want to better understand testing, QA, or want to/have to work with QA people. [2]

[1] https://pragprog.com/titles/tpp20/the-pragmatic-programmer-2... [2] https://www.amazon.com/Lessons-Learned-Software-Testing-Cont...

Re:The Coffee Machine Hiring Test on Sunday August 11, 2024 @01:48PM (#41217956)
Trying to service, or even just open up, any appliance at a workplace is against the Occupational Safety and Health regulations in my country.
This has to be satire, right?
Re:Optimizing Linux for an AMD Xiaomi/Framework Laptop on Thursday May 16, 2024 @01:27AM (#40375474)
Can you share your nixos config?
Thank you again! This is definitely something to start from!
Thank you so much! That sounds surprisingly straightforward. I expected a lot more fiddling to get going.

Where would I start if I wanted to use a model programmatically ? Like let's say I am building a chat bot. I have a large data set of replies I want the model to mimic, and I'd want to do this in Python. Of course, I'd probably use a different model than Granite.

I'm a complete newb when it comes to AI, and I am getting pretty ashamed of it too. How do I take a model like this and use it in my day to day? Can I somehow use in, say, VSCode? How do I point it at my code base, and use it to help me write new code?
Re:Ask HN: Who is hiring? (May 2024) on Wednesday May 01, 2024 @04:17PM (#40228796)
Sorry, should have been more clear, I meant other EU citizens working exclusively remotely.
Re:Ask HN: Who is hiring? (May 2024) on Wednesday May 01, 2024 @01:01PM (#40226024)
Hi, are applicants from elsewhere in the EU considered?
Re:Proxmox VE: Import Wizard for Migrating VMware ESXi VMs on Thursday April 04, 2024 @05:18PM (#39935910)
Replying to my own comment for posterity. I was able to figure it out!

In the LXC, I created a new non-root user and then set it's uid and git to a LOWER number than what every tutorial about rootless Podman recommends (devel being my non-root user here):

  # cat /etc/subuid /etc/subgid
  devel:10000:5000
  devel:10000:5000
Then I also had to edit configuration for the LXC itself on the Proxmox host to allow tun and have it created on container boot:

   # cat /etc/pve/lxc/{lxc_vmid}.conf
   ...truncated...
   lxc.cgroup2.devices.allow: c 10:200 rwm
   lxc.mount.entry: /dev/net dev/net none bind,create=dir
Note: I have no idea why a lower number of ids works...
Was there anything extra you have done on the Host itself?
That actually did not do anything different for me. I did the following:

1) Created a new LXC.

2) As root, I created a new user "devel"

3) For the "devel" user set both subuid and subgid to devel:100000:65536

4) As root, installed podman

5) In another SSH session, logged in as "devel" and ran "podman version"

Same error as before. This is in a Debian 12 LXC running on Proxmox.

Thank you, this made me realize I assigned a wrong (too little) number for uids. It did not fix my issue however. I still see

  (dev) $ podman info
  ERRO[0000] running `/usr/bin/newuidmap 3427 0 1000 1 1 100000 65536`: newuidmap: open of uid_map failed: Permission denied
  Error: cannot set up namespace using "/usr/bin/newuidmap": exit status 1
I tried a solution I found on Red Hat's Customer Portal:

  (root) # setcap cap_setuid+ep /usr/bin/newuidmap
  (root) # setcap cap_setgid+ep /usr/bin/newgidmap
Also did not work. I can run

  (root) # podman info 
just fine as root. This leads me to believe there are some other problems with my non-root user permissions.

EDIT: It probably makes little sense, to run rootless on top of an already unprivileged LXC. I just wanted to give vscode server it's own non-root user in there. Oh well...

Re:Proxmox VE: Import Wizard for Migrating VMware ESXi VMs on Wednesday March 27, 2024 @05:08PM (#39844630)
Unprivileged LXCs? Interesting, I thought containers would require privileged LXC. At least, that it my takeaway from trying to run Podman in a nesting enabled, but unprivileged LXC under non-root user. I kept running into

> newuidmap: write to uid_map failed: Operation not permitted

I tried googling it, tried some of the solutions, but reached the conclusion that it's happening because the LXC is not privileged.

We did use this approach years back when I worked for on a feature that generated PDF invoices.

But I wondered whether using instead something like LaTeX wouldn't be faster and easier to scale.

Re:Home Lab Beginners guide on Saturday March 09, 2024 @03:29AM (#39650330)
Any good tutorials for dummies like me?
Re:How to keep engineers out of meeting hell on Friday February 16, 2024 @01:58PM (#39401437)
Or someone gets the short end, like me a European, who has to be on meetings with the US in the late afternoon. I do have the mornings free of meetings, so that's nice at least.

Older »