Hacker News: agartner

New comment by agartner in "GitHub is having issues now"

agartner — Mon, 27 Apr 2026 18:23:47 +0000

Yeah I think I've finally had enough. I need to start seriously advocating for alternatives since this is starting to impact our business. It's clearly not getting any better.

New comment by agartner in "Incident with multple GitHub services"

agartner — Thu, 23 Apr 2026 22:01:32 +0000

There was another really bad incident today: https://www.githubstatus.com/incidents/zsg1lk7w13cf

> We have resolved a regression present when using merge queue with either squash merges or rebases. If you use merge queue in this configuration, some pull requests may have been merged incorrectly between 2026-04-23 16:05-20:43 UTC.

We had ~8 commits get entirely reverted on our default branch during this time. I've never seen a github incident quite this bad.

New comment by agartner in "Just-bash: Bash for Agents"

agartner — Thu, 26 Feb 2026 22:40:32 +0000

If anyone is looking to make a similar thing in go I suggest https://pkg.go.dev/mvdan.cc/sh/v3/interp

I've been using it to make my own sandbox that is much more configurable than the default claude code sandbox: https://github.com/gartnera/lite-sandbox

New comment by agartner in "Show HN: Tailsnitch – A security auditor for Tailscale"

agartner — Mon, 05 Jan 2026 20:03:40 +0000

Tailscale policy tests are a bit hard to write but help us have confidence in our changes.

https://tailscale.com/kb/1337/policy-syntax#tests

New comment by agartner in "Pricing Changes for GitHub Actions"

agartner — Tue, 16 Dec 2025 17:46:49 +0000

I guess it was only a matter of time...

Part of this is fair since there is a cost to operating the control plane.

One way around this is to go back to using check runs. I imagine a third party could handle webhooks, parse the .github/workflows/example.yml, then execute the action via https://github.com/nektos/act (or similar), then post the result.

New comment by agartner in "Native Secure Enclave backed SSH keys on macOS"

agartner — Sun, 23 Nov 2025 20:11:14 +0000

I've been using this for a ~year now and it works very well. Thanks!

New comment by agartner in "Native Secure Enclave backed SSH keys on macOS"

agartner — Sun, 23 Nov 2025 20:09:25 +0000

https://github.com/Foxboron/ssh-tpm-agent works well for me

New comment by agartner in "Windsurf employee #2: I was given a payout of only 1% what my shares where worth"

agartner — Thu, 24 Jul 2025 21:21:26 +0000

Working on decently cool things with relatively limited bureaucracy.

New comment by agartner in "Migrating Away from Bcachefs"

agartner — Fri, 24 Jan 2025 16:31:55 +0000

Yeah just typical Debian stuff. jwz has been ranting about this for years. It's not worth spending any time on it.

Some suggestions:

- Only "supporting" the latest mainline kernel and latest tools. I prefer to point to CI system configurations to show exactly what it "supported"

- Make this clear via your website and a pinned issue on Github.

- Force users to report the versions they use via an issue template: https://docs.github.com/en/communities/using-templates-to-en.... Immediately close any issues not meeting your version/system requirements without further discussion or thought.

New comment by agartner in "Migrating Away from Bcachefs"

agartner — Thu, 23 Jan 2025 23:50:56 +0000

I've been patiently waiting to convert my ZFS array to bcachefs. I'm very excited about better SSD promotion logic. But I'm not willing to spend any time on an experimental filesystem on my main systems.

> But you can expect to get flamed about running Debian, or perhaps more accurately, not being willing to spearhead Kent's crusade against Debian's Rust packaging policies.

It is quite unfortunate that Kent couldn't have just said "Debian isn't supported, we will revisit this when bcachefs is more stable" and stopped talking after that. Debian and experimental software just don't work well together.

New comment by agartner in "GitHub Linux ARM64 hosted runners now available for free in public repositories"

agartner — Thu, 16 Jan 2025 19:10:51 +0000

Here's a quick example I put together on how to use these runners to accelerate docker builds: https://github.com/gartnera/actions-arm64-native-example

New comment by agartner in "RCE Vulnerability in QBittorrent"

agartner — Sat, 02 Nov 2024 18:24:52 +0000

There are attestations that the binaries were built via CI:

https://userdocs.github.io/qbittorrent-nox-static/artifact-a...

Here's a verification of the latest build:

  gh attestation verify x86_64-qbittorrent-nox -o userdocs
  Loaded digest sha256:af9ceace3fea1418ebd98cd7a8a7b6e06c3d8d768f4d9c9ce0d3e9a3256f40d9 for file://x86_64-qbittorrent-nox
  Loaded 1 attestation from GitHub API
   Verification succeeded!

  sha256:af9ceace3fea1418ebd98cd7a8a7b6e06c3d8d768f4d9c9ce0d3e9a3256f40d9 was attested by:
  REPO                             PREDICATE_TYPE                  WORKFLOW
  userdocs/qbittorrent-nox-static  https://slsa.dev/provenance/v1  .github/workflows/matrix_multi_build_and_release_qbt_workflow_files.yml@refs/heads/master

New comment by agartner in "A terrible way to jump into colocating your own stuff"

agartner — Mon, 23 Sep 2024 22:32:50 +0000

Spending all their security time/budget on box checking rather than actual security.

I'd rather see open ended red team pentest reports.

New comment by agartner in "Google Chrome has an API accesible only from *.google.com"

agartner — Tue, 09 Jul 2024 18:56:31 +0000

It seems most if not all google domains are HSTS preloaded so no you can't: https://hstspreload.org/?domain=script.google.com

New comment by agartner in "Docker Is Having an Outage"

agartner — Thu, 20 Jun 2024 22:14:27 +0000

Yep I'm getting 503's. But the status page says nothing is wrong: https://www.dockerstatus.com/

Update: I configured the gcp docker mirror and can pull images again https://cloud.google.com/artifact-registry/docs/pull-cached-...

New comment by agartner in "Ollama is now available on Windows in preview"

agartner — Sat, 17 Feb 2024 19:50:02 +0000

Working well for me on a 7900XT with ROCm 6 and Linux 6.7.5 thanks!

New comment by agartner in "The cost of cheap TVs"

agartner — Wed, 04 Jan 2023 02:09:50 +0000

I personally just blocked all the lg domains in AdGuard. That way I can keep using the apps.

With full internet access the tv takes significantly longer to load and navigate.

New comment by agartner in "Show HN: Beesy – Record Google Meets for free, download locally"

agartner — Mon, 02 Jan 2023 20:47:01 +0000

Yes we exclusively use google meet. It's very nice. I feel pain every time I have to use anything else.

New comment by agartner in "More developers use Linux than Mac, according to 2022 StackOverflow survey"

agartner — Wed, 28 Dec 2022 19:18:54 +0000

Fractional scaling and no screen tearing are the main reasons I chose to adopt Wayland (sway) ~2 years ago.

New comment by agartner in "Let's Encrypt issues its 3Bth cert"

agartner — Fri, 21 Oct 2022 02:20:45 +0000

Using a wildcard domain (*.agartner.com) helps mask the actual subdomain fyi