Hacker News: moochmooch

New comment by moochmooch in "BuildKit: Docker's Hidden Gem That Can Build Almost Anything"

moochmooch — Thu, 26 Feb 2026 22:19:22 +0000

so use Bazel or buck2 if you need an iteration on make's handling of changed files. Bazel is much more serious of a project than buildkit. I'm not saying make is more functional that buildkit (it might be to some), I'm saying its better written software than buildkit. two separate things

New comment by moochmooch in "BuildKit: Docker's Hidden Gem That Can Build Almost Anything"

moochmooch — Thu, 26 Feb 2026 15:36:21 +0000

unfortunately, make is more well written software. I think ultimately Dockerfile was a failed iteration of Makefile. YAML & Dockerfile are poor interfaces for these types of applications.

The code first options are quite good these days, but you can get so far with make & other legacy tooling. Docker feels like a company looking to sell enterprise software first and foremost, not move the industry standard forward

great article tho!

New comment by moochmooch in "DJI drone flight log viewer"

moochmooch — Mon, 08 May 2023 14:57:33 +0000

This is cool, is there a docs website available?

New comment by moochmooch in "Ask HN: How to make a native GUI with a modern language?"

moochmooch — Tue, 09 Aug 2022 15:16:06 +0000

That is a downside. However, it's better to look at Tauri like you might look at React Native. If complete consistency between platforms is required, Tauri still saves you time by letting you write a single codebase and then do a low effort port to each platform. For many applications, Tauri applications will look the same between platforms out of the box.

That's the pitch anyway. People can spend a lot of time on ios vs android in react native applications, so ymmv

New comment by moochmooch in "Nutanix Objects violates MinIO’s open source license"

moochmooch — Tue, 19 Jul 2022 17:42:52 +0000

it stops low effort grifting of network-enabled open source for cash.

New comment by moochmooch in "Today’s JavaScript, from an outsider’s perspective (2020)"

moochmooch — Fri, 27 May 2022 15:12:38 +0000

That should not be the litmus test for writing software. Lots of software can have 1 user, yourself. Stability and ability to distribute be damned

New comment by moochmooch in "Today’s JavaScript, from an outsider’s perspective (2020)"

moochmooch — Fri, 27 May 2022 15:09:48 +0000

ts-node introduces its own bugs and ergonomics inconsistencies on top of node. I've used it on multiple projects in the past and ended up removing it as a dep when I've been able to.

Not saying anyone who is using ts-node should immediately jump to Deno. Their use cases don't fully overlap.

New comment by moochmooch in "Today’s JavaScript, from an outsider’s perspective (2020)"

moochmooch — Fri, 27 May 2022 15:05:18 +0000

whinging about supply chain security is the bikeshedding topic of 2022

New comment by moochmooch in "D1: Our SQL database"

moochmooch — Wed, 11 May 2022 17:06:23 +0000

It wouldn't be better, it would be arbitrary

New comment by moochmooch in "SpaceX avoided a Russian jamming attack in Ukraine"

moochmooch — Thu, 21 Apr 2022 19:34:43 +0000

JPL is such an outlier it's not even worth talking about in this discussion

New comment by moochmooch in "Ask HN: When did 7 interviews become “normal”?"

moochmooch — Sun, 03 Apr 2022 04:08:01 +0000

> thoroughly vetting a candidate

Either you work at startups or you thoroughly vet candidates, not both.

New comment by moochmooch in "Container security best practices: Ultimate guide"

moochmooch — Wed, 13 Oct 2021 21:19:42 +0000

I'm scoping my statement to container security & orchestration best practices, not their competency as a whole. I know the specifics of their guidance due to the industry I work in, so I feel comfortable speaking generally about specific guidance in regards to specific technology.

Your comments reads overly defensive to me.

New comment by moochmooch in "Container security best practices: Ultimate guide"

moochmooch — Wed, 13 Oct 2021 18:53:56 +0000

It's funny that you use the term "actual" to describe the guidance from the US government. They don't really know what they are talking about. Their release process for guidance takes so long that by the time it's release, it's out of date. This is absolutely true for k8s guidance. Last I checked, they were suggesting everyone use "Docker Enterprise" on their guidance long after it no longer existed (are vendors supposed to magically know mirantis is now an option?)

New comment by moochmooch in "NSA Kubernetes Hardening Guidance [pdf]"

moochmooch — Wed, 04 Aug 2021 01:34:21 +0000

Do you use a proprietary tool to filter containers lacking the certificate mechanisms or is this handled as part of the manifests?