Hacker News: awoimbee

New comment by awoimbee in "Sem: New primitive for code understanding – not LSPs, but entities on top of Git"

awoimbee — Sat, 06 Jun 2026 22:50:23 +0000

The benchmarks aren't great, they're super specific to sem's output: why would I ask Claude how many "entities" were modified by a commit and do I need a tool specifically for this request ? Note that an "entity" is a sem-specific concept...

New comment by awoimbee in "Codex just found a "workaround" of not having sudo on my PC"

awoimbee — Sun, 31 May 2026 19:29:18 +0000

Use podman then, or rootless docker if you can make it work

New comment by awoimbee in "DeepSeek reasonix, DeepSeek native coding agent with high caching and low cost"

awoimbee — Mon, 25 May 2026 07:43:39 +0000

You didn't quote the interesting part:

> our implementation is it only prunes calls from > 3 user messages ago, if context is > 40K, and only if there's at least 20K tokens to be removed

Seems reasonable to me and explains why I can have long sessions (way longer than with zed agents) while still hitting cache. Opencode is just missing per-provider TTL.

New comment by awoimbee in "Dirtyfrag: Universal Linux LPE"

awoimbee — Thu, 07 May 2026 21:30:44 +0000

And your containers need to have specific capabilities enabled, which aren't by default on kubernetes and podman.

New comment by awoimbee in "Moving a large-scale metrics pipeline from StatsD to OpenTelemetry / Prometheus"

awoimbee — Thu, 16 Apr 2026 06:35:10 +0000

Directly emitting metrics using OTLP instead of having the OTel receiver scrape the metrics endpoint is interesting. I never made that move because the Prometheus metrics endpoint works and is so simple, and it's what most projects (eg kubernetes) use.

New comment by awoimbee in "OpenSUSE Kalpa"

awoimbee — Tue, 17 Mar 2026 17:58:02 +0000

Tubleweed has snapshots and rollbacks too by default. But yeah immutable distros are good for beginners so they don't destroy their system!

New comment by awoimbee in "Infrastructure decisions I endorse or regret after 4 years at a startup (2024)"

awoimbee — Sat, 21 Feb 2026 10:00:42 +0000

I was the sole DevOps at my company for a long time, the team is now bigger. I used terraform for AWS and pulumi for K8S (terraform was too restrictive).

IMO pulumi is a huge gain of productivity when you know what you're doing. Cons: * It's plagued by bugs and the pulumi-kubernetes provider is not getting enough attention from the pulumi team (they're always working on compatibility with yet another language instead of focusing on one thing) * You end up with your very specific/personal codebase instead of having a generic/standard thing

Still, no regrets, I saved so much time thanks to pulumi!

With a bigger team: * Oboarding people takes more time * You end up with code quality issues. Most "DevOps" people aren't devs, sadly.

New comment by awoimbee in "Garage – An S3 object store so reliable you can run it outside datacenters"

awoimbee — Fri, 19 Dec 2025 20:11:43 +0000

How is garage for a simple local dev env ? I recently used seaweedfs since they have a super simple minimal setup compared to garage which seemed to require a config file just to get started.

New comment by awoimbee in "Core Devices keeps stealing our work"

awoimbee — Tue, 18 Nov 2025 08:29:05 +0000

That's why the GPL license was created.

New comment by awoimbee in "Helm 4.0"

awoimbee — Sat, 15 Nov 2025 00:43:17 +0000

The feature that makes me love pulumi is crd2pulumi, it generates simple, type checked and documented libraries from CRDs.

E.g. these are the libs I use, generated from CRDs: https://github.com/Extrality/pulumi-crds

New comment by awoimbee in "Hyperflask – Full stack Flask and Htmx framework"

awoimbee — Fri, 17 Oct 2025 07:55:59 +0000

I ran into: - too high memory usage - no warning when a task doesn't yield - monkey patching: * general confusion like threading.local behaving differently * pain to integrate sentry in gunicorn with gevent since you need to import sentry after monkey patching. The OTel libs work better but you need to be careful * all compiled libs need to be replaced (eg psycogreen) ...

New comment by awoimbee in "Hyperflask – Full stack Flask and Htmx framework"

awoimbee — Thu, 16 Oct 2025 18:11:43 +0000

Building a framework on a non-async foundation (flask) in 2025 is bizarre. The only way to scale a flask API is to use gevent, which is just problems waiting to happen. Asyncio is just better, safer and has been adopted by the industry.

New comment by awoimbee in "iPhone Air"

awoimbee — Wed, 10 Sep 2025 06:08:57 +0000

THANK YOU FOR YOUR ATTENTION ON THIS MATTER

This announcement contains so many fake marketing words I can't help but read it in DJT's voice... Add Tim Apple's present and yeah, cool tech, not interested.

New comment by awoimbee in "I ditched Docker for Podman"

awoimbee — Fri, 05 Sep 2025 15:10:43 +0000

The main issue is podman support on Ubuntu. Ubuntu ships outdated podman versions that don't work out of the box. So I use podman v5, GitHub actions uses podman v3, and my coworkers on Ubuntu use docker. So now my script must work with old podman, recent podman and docker

New comment by awoimbee in "Unfortunately, the ICEBlock app is activism theater"

awoimbee — Tue, 02 Sep 2025 11:13:03 +0000

This can't be reduced to a boolean (as always). The issue is that ICE is doing #2 via #1.

New comment by awoimbee in "XZ Utils Backdoor Still Lurking in Docker Images"

awoimbee — Tue, 19 Aug 2025 10:43:20 +0000

Containers != Docker Vulnerable software is an issue outside containers too. Containers allow better isolation.

New comment by awoimbee in "Google restricts Android sideloading"

awoimbee — Thu, 05 Jun 2025 17:05:03 +0000

I can't find sources to this one sided article nor can I find anything recent when searching for it

New comment by awoimbee in "CVE-2024-47081: Netrc credential leak in PSF requests library"

awoimbee — Tue, 03 Jun 2025 21:22:44 +0000

That's some horrible url parsing code...

But honestly urllib sucks:

url.hostname doesn't return the port url.netloc also returns the basic auth part So you have to f"{u.hostname}:{u.port}"

New comment by awoimbee in "Ask HN: What projects do you donate to?"

awoimbee — Tue, 27 May 2025 06:57:36 +0000

I donate to immich even though I still use Google photos since I don't want to host critical infra in my spare time

https://github.com/immich-app

New comment by awoimbee in "Writing "/etc/hosts" breaks the Substack editor"

awoimbee — Sat, 26 Apr 2025 17:55:55 +0000

I'm in the position where I have to run a WAF to pass security certifications. The only open source WAFs are modsecurity and it's beta successor, coraza. These things are dumb, they just use OWASP's coreruleset which is a big pile of unreadable garbage.