But I have to say that it hits the trifecta of annoyance:

  - written with the help of an AI (I hate the pejorative use of the term vibe-coded)
  - written in Rust
  - non-GPL

I think of Forgejo Appliance as an open-source black box. It makes the Forgejo service available through a web interface, but beyond that, it’s pretty opaque. The VM is designed to be ephemeral (torn down and rebuilt for updates). Internally, it’s a group of three server apps tied together with UNIX sockets. This avoids the DNS and security headaches of exposing local TCP/IP ports. Like a managed cloud app, you can’t even connect to it with SSH.

It wasn’t all fun and games. Navigating through the host and guest restrictions felt like threading a needle:

  - The macOS Security Framework restricts Keychain access to local shell sessions.
  - Let’s Encrypt has a strict rate limit for certificate requests, which makes tearing down and rebuilding ephemeral VMs difficult.
  - TLS certificates are usually managed as small directories of files. To persist them across ephemeral boots, I tar-ed, compressed, and base64-encoded the whole directory into a small string and stuffed it directly into Apple Keychain.
  - When testing isn’t going well, you can easily stack up ghost Tailscale nodes and trigger MagicDNS collisions.

Comments URL: https://news.ycombinator.com/item?id=48753740

Points: 7

# Comments: 1

https://news.ycombinator.com/item?id=48002958

For example, I can create a VM on my Mac mini at home that hosts a git repo or even a Forgejo server. A colleague in my Tailnet can then connect to this VM to clone, push or pull source code changes from a coffeeshop or airliner while not exposing the rest of my Mac mini.

Comments URL: https://news.ycombinator.com/item?id=48272545

Points: 80

# Comments: 19

For example, I can create a container on my MacBook to run an application. A colleague in my Tailnet can then connect to this container to interact with that application from a coffeeshop or airliner while not exposing the rest of my MacBook.

Comments URL: https://news.ycombinator.com/item?id=48002958

Points: 4

# Comments: 1

edit: For example, I can create a container on my MacBook to run an application. A colleague *in my Tailnet* can then connect to this container to interact with that application from a coffeeshop or airliner while not exposing the rest of my MacBook.

https://github.com/highpost/tailscale-macos-container

You can also load your hearing test results (from either an audiologist or a hearing test app like https://mimi.io/products/mimi-hearing-test-app) into Apple Health and then use them with your Earbuds.

  * read-only and minimal
  * fully aware of different Linux boot environments
  * GPLv3 license compatible, clean-room implementation by the OpenSolaris/Illumos team. The implementation predates Ubuntu’s interest.

It took a lot of time and effort to bring the stakeholders together for congestion pricing. And to withhold her approval at the last moment was shocking. It's hard to imagine what she was really thinking and even harder to understand how she felt she would be rewarded for it. That's not a real answer to your question, but her reasoning on both congestion pricing and Eric Adams just seems opaque.