This is a message to remind myself to share my config later.
I will state that I a, using cloudnativepg for postgres.
This is a message to remind myself to share my config later.
I will state that I a, using cloudnativepg for postgres.
Debian Linux, and many other Linux distros, have extensive measures to protect their supply chain. Packages are signed and verified, by multiple developers, before being built reproducibly (I can build and verify and identical binary/package). The build system has layers, such that if only a single layer is compromised, nothing happens and nobody flinches.
Programming langauge specific package repos, have no such protections. A single developer has their key/token/account, and then they can push packages, which are often built on their own devices. There are no reproducible build to ensure the binaries are from the same source code, and no multi-party signing to ensure that multiple devs would need to be compromised in order to compromise the package.
So what happened, probably, is some developer got phished or hacked, and gave up their API key. And the package they made was popular, and frequently ran unsandboxed, so when other developers downloaded the latest version of that package, they got hacked too. The attackers then used their devices to push more malicious packages to the repo, and the cycle repeats.
And that's why supply chain attacks are now a daily occurrence.
No, they're dual licensed. Canonical has users contributing signing a Contributor License agreement, in which they agree to allow Canonical to distribute alternatively licesed, or proprietary versions.
This change was somewhat controversial, and partially why Incus was forked from LXD.
Companies at onferences give 4/8gb out sometimes. They buy branded ones in bulk.
Maybe: https://xyproblem.info/ ?
If you want to use syncthing remotely tha the answer is probably wireguard/other vpn.
Nuitka is interesting. The articlenotes that it compiles python to bytecode, instead of bundling an interpreter, which is true.
But what the article doesn't mention is that Nuitka has a paid version, which includes a feature of code/binary obfuscation, in order to make reverse engineering more difficult. I wonder if hackers used the paid version?
Void auth, or kanidm look like easier alternatives.
I have installed an OS onto just the btrfs root subvolume, leaving the home directory intact. This is how I originally swapped from Manjaro to Arch. The arch manual install instructions helped.
But this should be a feature of the graphical installers imo.
Transparent fileystem compression and deduplication (btrfs feature not in ext4) compresses data while still having it be accessible normally. This leads to big space savings.
You can use the tool compsize to check it out.
Postgres jsonb?
Wikipedia itself is doing fine but they have a bunch of super interesting side projects that they don't advertise much, and aren't doing as well. Wikinews, their news site is shutting down: https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_Signpost/Single/2026-03-31#News_and_notes (this is really close to april fools hopefully I didn't eat the onion. Or hopefully I did?).
My favorite is wikibooks: http://wikibooks.org/ , which are open source texbooks that can be edited wikipedia style. Their programming one's are really high quality.
But they also have a travel voyage, wikivoyage, and more: https://en.wikipedia.org/wiki/Wikipedia:Wikimedia_sister_projects