New around here? Register your SA Forums Account here!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Nomnom Cookie
Aug 30, 2009



what if Alex jones had a pc magazine column...

systemd is a conspiracy of sjws Microsoft and SCO to destroy linux. Linus is a tragic hero entrapped by sjw provocateurs. def systemd is worse

Adbot
ADBOT LOVES YOU

Nomnom Cookie
Aug 30, 2009



wayland has almost reached beta at which point it will be superseded by, i dont fuckin know, some poo poo called corundum or something

Nomnom Cookie
Aug 30, 2009



kde is the closest linux to being windows which is still the best that a inux can be

Nomnom Cookie
Aug 30, 2009



funy compuetr

Nomnom Cookie
Aug 30, 2009



Max Facetime posted:

“Rape apology is an umbrella term for any arguments suggesting that rape is infrequent, misreported, over-reported, not that big a deal, or excusable in some circumstances”

Theodore Ts’o is definitely a rape apologist


now I’m not a rape survivor myself but I’m certain there is no way for his rape apologizing to be justifiably part of the whole Linux experience either

I find your definition of rape apology troubling in some respects but if I change it to “some things a not terrible person does not discuss on a tech conference mailing list” then I like it pretty good

Nomnom Cookie
Aug 30, 2009



front panel out on my desktop hums when the gpu fires up, cause the header is at the back right next to the pcie slot

turns out i just dont gaf enough to do anything about it

Nomnom Cookie
Aug 30, 2009



Suspicious Dish posted:

Greg KH is an extremely nice and good man who put up with Linus bullshit for a long time, privately trying to console people and fix the situation, and has been advocating for change behind the scenes for forever.

yeah no talking poo poo about gregkh

Nomnom Cookie
Aug 30, 2009



openbsd may be a shitshow but holy poo poo is someone defending selinux itt

also lol @ using any kind of on-machine firewall. do a proper security group ffs and if you have to manage physical machines just kill yourself now

Nomnom Cookie
Aug 30, 2009



eschaton posted:

I don’t think nBSD is defending SELinux, but defending MAC in general which is implemented in lots of systems including other BSDs

mac is selinux plus rounding errors

Nomnom Cookie
Aug 30, 2009



Notorious b.s.d. posted:

a working MAC framework is table stakes to pretend your OS is secure

windows is unironically a better security posture than openbsd

orrr I can acknowledge that my os is a piece of poo poo and as a bonus never touch selinux ever

Nomnom Cookie
Aug 30, 2009



akadajet posted:

if it already knows the commands it should just do it itself :colbert:

when the issue is “program tried to do something but was blocked” you really want a human in the loop

Nomnom Cookie
Aug 30, 2009



Notorious b.s.d. posted:

selinux and containers are two great tastes that taste great together. aside from simple namespacing, none of the extant container tools have any kind of security story, because it's assumed you'll use selinux to manage that problem

selinux from day one was designed to be parameterized. it's fairly straightforward to write a global policy that applies to all containers, but give each one its own set of contexts/labels for files

you really couldn't have a better fit

and you never have to worry about corner cases, because the containerized processes aren't meant to touch anything outside their labeled area, anyway

great now convince my boss and whoever else controls the purse strings that selinux is a good thing to allocate an FTE to. also, files? really? this is tyool 2018. attackers accessing files is 100% not a concern

Nomnom Cookie
Aug 30, 2009



building your own when you can buy a box that does the job is for college students and other poors. it is never a correct business decision

Nomnom Cookie
Aug 30, 2009



android container is obviously data’s bedroom on the enterprise ncc-1701d

Nomnom Cookie
Aug 30, 2009



here what you really want is 300 in order x86 cores with deep learning extensions

Nomnom Cookie
Aug 30, 2009



kidding aside i assume their plan is to scale up their embedded graphics until it uses lots of power and is slower than ATI and nVidia cards at the same price

Nomnom Cookie
Aug 30, 2009



i don't know who to root for. gnome developers are terrible, but so are people who make user stylesheets for desktop programs

Nomnom Cookie
Aug 30, 2009



cause gentoo is poo poo

Nomnom Cookie
Aug 30, 2009



sorry to the five remaining bsd users that linux got a decent init. maybe use linux then you can have a decent init too

setting up systemd-networkd to handle ENIs attached to k8s workers at runtime was ez-pz, just a file with like two lines. wildcard match on ifname and "yes use dhcp" hey we're done

systemd-timesyncd syncs time which is very needs suiting

systemd-resolved makes split dns on openvpn painless

i dont give two sloppy shits about monoculture or any of that poo poo. if poettering goes off the deep end and fucks everything up I rest easy knowing that some other insufferable nerd will step up to take a crack at starting processes for me

Nomnom Cookie
Aug 30, 2009



almost the only healthy projects with a permissive license are open core and primarily maintained by one or a few companies. healthy being debatable

Nomnom Cookie
Aug 30, 2009



Tankakern posted:

nbsd is hellbent on bad mouthing gentoo at every opportunity because he knew someone who used it to rice his setup in 2004

i've also heard about hft people using gentoo, so i guess you're not the only one

gentoo is garbage trash and unfit for any purpose aside from making linux fans feel like they're hacking the gibson as they watch compile spam scroll past. this is still true with CFLAGS at default

Nomnom Cookie
Aug 30, 2009



Farmer Crack-rear end posted:

what's the ranking of linux from best linux to worst linux?

---- decent ----
RHEL
centos
---- tolerable ----
debian
ubuntu
---- trash ----
arch
gentoo
devuan
ubuntu derivates
fedora

Nomnom Cookie
Aug 30, 2009



Notorious b.s.d. posted:

it is a recurring problem in this thread that people, for some reason, think ubuntu is a tolerable situation. it is not. friends do not let friends use ubuntu.

debian is a different story but nobody cares about debian

so, here's a post from four years ago explaining in excrutiating detail why ubuntu is bad ok

ok

I don’t think anything at work actually uses distro packages though. it’s self-packaged ruby debs and other awful poo poo so we’d have to get better for what you said to make a difference

Nomnom Cookie
Aug 30, 2009



writing go and deploying it as a container with 1 file in it looks nice. will never get to do that but it looks nice

Nomnom Cookie
Aug 30, 2009



Tankakern posted:

gentoo is ~what you make it to be~, it's a meta distribution, a build-your-own-distro kit. if you think it still it trash it is because you didn't do anything in it.

i think we're using different words to say the same thing. yes, gentoo is a pile of garbage that you get the joy of picking through to cobble together a half-working system. if that is what you want to do on your free time that's fine, everyone needs a hobby. i myself did some questionable things in college, including gentoo experimentation. what i object strongly to is the notion that gentoo is ever appropriate for any use in the workplace, where innocent coworkers and customers will be impacted by the gentooer's bad decisions

Nomnom Cookie
Aug 30, 2009



Tankakern posted:

i use gentoo privately because:
  • it's fun
i use gentoo professionaly because:
  • it gives you crossdev
  • extreme control over the building process built-in in a package manager. why use yocto or buildroot when you can use ~portage~

ur fuckin with me, i can tell

Nomnom Cookie
Aug 30, 2009



hobbesmaster posted:

why 4pi instead of 2pi

because more number = better than, duh

Nomnom Cookie
Aug 30, 2009



use kde neon*, its based on bionic and ships massive updates a couple times a week

* if you are like me and constitutionally incapable of installing a good linux

Nomnom Cookie
Aug 30, 2009



Notorious b.s.d. posted:

selinux is good and cool and learned the important lessons from trusted solaris and trusted hpux

it is also arcane and pointlessly stupid. the tooling and documentation are laughably bad. it works perfectly well if you make the huge and far-more-than-should-be-necessary effort to grok its weirdness. so yeah it's pretty fuckin linux

Nomnom Cookie
Aug 30, 2009



Notorious b.s.d. posted:

it's way better than the systems that preceded it

if you think selinux is arcane and poorly documented, try configuring capability-based permissions on solaris

it starts with a book as thick as the yellow pages, and a java gui that takes several minutes to start. (not an exaggeration. minutes.)

"beats the poo poo out of solaris but still sucks" is very, very linux

Nomnom Cookie
Aug 30, 2009




this is horrifying but i can't quite put my finger on why

Nomnom Cookie
Aug 30, 2009



ewe2 posted:

Who cares about RH, I'm trying to understand why a network drive application needs the specifics of an ext4 filesystem. Google Drive doesn't need that, AFAIK.

feature support beyond open/read/write/close is real patchy for linux filesystems so it would make sense if they only supported ext4 and xfs, the two widely-used filesystems. ext4 only is really weird to the point that i wonder if they're trying to get rid of people using it to back up their digitalocean droplet or some poo poo

Nomnom Cookie
Aug 30, 2009



TimWinter posted:

The linux sucks this guy did in 2017 is what finally got me interested in Fedora, somehow.

please keep your fetishes out of yospos ty

Nomnom Cookie
Aug 30, 2009



let i hug posted:

Anyone have a link for a minimal-pain guide to setting up SELinux on a Debian desktop?

haha youre funny

Nomnom Cookie
Aug 30, 2009



had to reset my mba's bmc once. a very smooth experience. velvety and sensual

Nomnom Cookie
Aug 30, 2009



brand engager posted:

love to deal with computer


virtualbox is for when you want to get nothing done for a week

Nomnom Cookie
Aug 30, 2009



brand engager posted:

It's for a class, so I'm stuck using it

get vmware player and use that instead. at worst you have to convert the vdi or vhd or whatever to vmware's format

Nomnom Cookie
Aug 30, 2009



brand engager posted:

Why does it even matter which vm thing I'm using? This isn't some long-term setup where extra janitoring to have the Correct Yospos Tooling can pay off in any way. Finals are the first week of december, and the whole thing is getting torn down.

its about like being able to use the fuckin thing without it hanging

Notorious b.s.d. posted:

vmware player and vmware workstation are dead

they laid off all the devs and opened a maintenance office in bangalore

still better than virtualbox

Nomnom Cookie
Aug 30, 2009



cinci zoo sniper posted:

why vm.overcommit_ratio defaults to 50

so you have the other 50 for page cache? hardly matters what the original reason was. the reason it stays there is that no one can propose a kernel change that small without some high status individual deciding that everything will be destroyed if the change is made

Adbot
ADBOT LOVES YOU

Nomnom Cookie
Aug 30, 2009



cinci zoo sniper posted:

hm. i just wonder how to manage one server installation i oversee - its suggested to have the overcommit mode to 2, so it is guided by the overcommit ratio, but then with 50 im getting hard memory allocation/oom failures since the machine hosts moderately large db cluster and a few hungry jvm server apps concurrently - with the plot twist being that poo poo rarely ever actually uses that much ram, so it feels like i arbitrarily halve the ram system makes available to applications

i probably have too simplistic view of how ram is actually used :eng99:

iirc commit limit controls anonymous mappings and maybe locked pages, file-backed mappings having somewhere to go if the kernel needs to evict pages. basically vm.overcommit_ratio = 50 means up to half the system ram is allowed to be used for app heaps and other userspace stuff like buffer pools. the other 50 is for everything else: the kernel and page cache mainly. depending on your DB having a lot of ram available to the page cache is either absolutely vital or absolutely useless

iow search your feelings for the correct value of vm.overcommit_ratio

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply