[-] xinayder@infosec.pub 6 points 2 months ago

Can someone ELI5 what's going on? Seems like they are still fighting about Nix allowing a defense company to sponsor their conferences, and trying to ad hominem the project leaders.

[-] xinayder@infosec.pub 5 points 3 months ago

That's like going to a therapist and then finding out your therapist needs to go to therapy after treating you.

[-] xinayder@infosec.pub 10 points 4 months ago

That's usually what happens with FOSS. The problem as I see it is that the dev doesn't have time to update the app and there's almost no one stepping up to hel fix longstanding issues. I'm pretty sure the dev will be more than happy to see people submitting PRs to fix some issues with the app :)

[-] xinayder@infosec.pub 49 points 4 months ago

That doesn't seem to be the case. From what I read on HN, the dev quit because he thought it didn't make sense to submit CVEs for temporary/wip solutions, and F5 thought otherwise.

So as I see it, the developer quit because he didn't agree that a CVE should be opened for a work-in-progress solution that was live on Nginx.

[-] xinayder@infosec.pub 5 points 5 months ago

The same issue happens to me when opening links from any app on Wayland. For example, every time I click a link on a Discord chat, I have to manually click on the Firefox window because the focus is not automatic.

[-] xinayder@infosec.pub 12 points 7 months ago

I'd recommend Forgejo/Gitea as others have mentioned or https://sourcehut.org (instance available at https://sr.ht/)

[-] xinayder@infosec.pub 12 points 9 months ago* (last edited 9 months ago)

There's a GitHub issue tracking this bug. It seems like SDL3 was finally released and Valve "forgot" to compile SDL3 with Wayland support.

If you're using Wayland, you can add a startup parameter to force the game to use X11 and it will work.

This issue is also affecting Dota 2.

[-] xinayder@infosec.pub 5 points 9 months ago

I stopped reading when I read "Electron".

I used Heroic a few times and it's absolute garbage because it runs Electron.

They said they will offer these 2 versions side-by-side, but mark my words, a few months/years they will go with the Electron version and kill the GTK version.

[-] xinayder@infosec.pub 5 points 9 months ago
[-] xinayder@infosec.pub 14 points 9 months ago

Why is Gitness on the news and why is it being considered as the de-facto alternative to GitHub? Why is GitLab/SourceHut/Forgejo (and Codeberg)/Gitea not being considered?

Forgejo for example has almost a 1:1 compatibility with GitHub Actions and it didn't make the news. If you were to replace GitHub, Codeberg or Forgejo is a very good replacement for it.

[-] xinayder@infosec.pub 4 points 9 months ago

I'm not using k8s just to host my website, I have other services on it as well.

I know it's overkill for small stuff, but I'm running k3s and not k8s (so it's a lightweight engine). The reason I'm doing this is for learning purposes, I want to learn more about k8s and thought I could do an experiment with it on a VPS.

I plan on renting another VPS and adding another node to the cluster, as it's pretty cheap (Hetzner ARM server costs around 3.8 EUR without VAT with 2 vCPUs and 4GB RAM). For example, it's much more cheaper than the VPS I have on Vultr that has 1GB RAM and 1 vCPU.

[-] xinayder@infosec.pub 12 points 9 months ago

An Oblivion remaster made in Skyrim

owait, that already exists, Skyblivion is a thing

16

I have a small VPS that hosts some services I use daily and I'd like to migrate that to a K8s cluster. One of the services being hosted is my personal website, built with Hugo and served by Caddy.

Right now, I have the code for my website on Codeberg and I have a CI pipeline that builds the website and uploads it to my VPS via rsync.

I want to move the website to the k8s cluster, but I have no idea how to do it "securely". What I have right now is a separate user on my VPS called deploy and it rsyncs the files to the data directory Caddy is using to serve my files.

I thought I could do the same on the k8s cluster server, but it's usually not a good idea to mount host paths with k8s unless absolutely necessary, because container escaping is an actual problem.

So far the only alternative I could think of is to change the CI pipeline to publish my website on another branch and signal it to my K8s cluster so the files should be updated, but I'd like to know what better options exist and how easy they are to setup.

view more: next ›

xinayder

joined 10 months ago