Hacker News: oarmstrong

New comment by oarmstrong in ".gitignore Everything by Default"

oarmstrong — Sat, 05 Sep 2026 19:33:13 +0000

Ha! It’s actually patch (as in select parts of the patch) though I remember it as partial.

New comment by oarmstrong in "Advent of Sysadmin 2025"

oarmstrong — Mon, 01 Dec 2025 11:28:41 +0000

I share your disdain for buzzwords but SRE is definitely a different role.

New comment by oarmstrong in "Gorgeous-GRUB: collection of decent community-made GRUB themes"

oarmstrong — Sun, 04 May 2025 13:34:49 +0000

Ah got it, thanks. I thought you were testing the image somehow, a bit like inspec.

Still cool though, nice.

New comment by oarmstrong in "Gorgeous-GRUB: collection of decent community-made GRUB themes"

oarmstrong — Sun, 04 May 2025 08:20:43 +0000

Could you tell me more about the playwright tests? From what I can see it's a web testing framework, I don't see how that fits in here.

New comment by oarmstrong in "OrbStack: The fast, light, and easy way to run Docker containers and Linux"

oarmstrong — Mon, 02 Sep 2024 08:08:51 +0000

> My CI server uses Firecracker VM's to isolate OCI containers

Is this something you built yourself? I've been looking for a CI tool that uses Firecracker but never found anything, I started building something myself but it never really got finished. Would love to drop that project and use something off the shelf.

New comment by oarmstrong in "Ask HN: Are there any open source forks of nomad and consul?"

oarmstrong — Thu, 02 May 2024 18:56:34 +0000

Consul is built upon the Serf library. https://www.serf.io/intro/vs-consul.html

New comment by oarmstrong in "Keeping a long shell history"

oarmstrong — Sun, 21 Jan 2024 11:56:20 +0000

Yes, the article did.

New comment by oarmstrong in "PixieFail: Nine Vulnerabilities UEFI Implementations"

oarmstrong — Thu, 18 Jan 2024 21:20:46 +0000

Framework has open sourced the EC firmware, not the boot firmware. The UEFI implementation is still closed source proprietary InsydeH2O software.

New comment by oarmstrong in "Non-interactive SSH password authentication"

oarmstrong — Tue, 26 Dec 2023 08:54:31 +0000

Hashicorp's Vault works quite nicely. Teleport is another tool I believe handles this but haven't used it personally.

New comment by oarmstrong in "Google Cloud Spanner is now half the cost of Amazon DynamoDB"

oarmstrong — Sat, 14 Oct 2023 07:51:31 +0000

Right, running ECS on EC2, not Fargate on EC2. When ECS launched it only had the EC2 launch type (where as you said you must manage your machines). Fargate then came along for both ECS and EKS where Amazon managed the machines for you.

New comment by oarmstrong in "Google Cloud Spanner is now half the cost of Amazon DynamoDB"

oarmstrong — Thu, 12 Oct 2023 08:16:39 +0000

Fargate on EC2? Sorry you’ve lost me, I understood Fargate to be a layer of AWS managed compute for ECS or EKS deliberately instead of EC2.

New comment by oarmstrong in "Caddy is the first and only web server to use HTTPS automatically and by default"

oarmstrong — Tue, 12 Sep 2023 11:46:24 +0000

I would imagine so the default behaviour could be identical across platforms.

New comment by oarmstrong in "Terraform Cloud is down for nearly five hours, and counting"

oarmstrong — Fri, 25 Aug 2023 18:42:13 +0000

I agree that it’s boring and works well. It’s also what I’m most worried about finding a reasonable alternative, we can’t just not update Vault.

Sadly Secrets Manager doesn’t hit all the features I need. Really hoping for an OpenTF-style fork of Vault.

New comment by oarmstrong in "Terraform Cloud is down for nearly five hours, and counting"

oarmstrong — Fri, 25 Aug 2023 10:24:08 +0000

What are you looking at for a Vault replacement?

New comment by oarmstrong in "Installing Debian bookworm without systemd"

oarmstrong — Wed, 19 Jul 2023 15:14:56 +0000

Obviously it’s a different OS and possibly isn’t relevant to you but I’ve found solace in OpenBSD (and other BSDs) in the search of “simplicity” of “the old days”.

New comment by oarmstrong in "Disabling the Intel Management Engine"

oarmstrong — Wed, 26 Oct 2022 17:44:00 +0000

I’d like to know more about AMD specifically too. I’m well aware that PSP is their equivalent but there seems to be so little information out there about it. Is it really an equivalent? Is it as bad as ME? Can it be disabled? Does it have the same level of access as ME? Have their been any exploits of it yet?

The wikipedia page is rather bare. There’s a couple of papers linked to but frankly they go over my head. Is there any respectable analysis out there?

New comment by oarmstrong in "Ask HN: What games are you having fun with?"

oarmstrong — Sat, 17 Sep 2022 14:13:00 +0000

That’s one I heard about a while back but haven’t given it a shot yet. I will now, thanks.

New comment by oarmstrong in "Ask HN: What games are you having fun with?"

oarmstrong — Sat, 17 Sep 2022 13:48:44 +0000

Couldn’t recommend it more. Simply beautiful game. Definitely agree with going in completely blind, try not to even read the Steam description, discovering the core mechanics was very much part of the experience for me. I was left very empty when I finished it, I wanted more and more; like finishing a fantastic book. Easily one of my favourite games of all time.

I didn’t enjoy the DLC as much as the base game, it felt rather disconnected. Which was disappointing given how connected the rest of the game is. Still a nice story, just not quite as good for me.

Are there any other similar games I may also enjoy? I’ve also played Journey and found that to be similarly touching. Stray was also very enjoyable for me.

New comment by oarmstrong in "Shortest URLs on the Internet"

oarmstrong — Sun, 11 Sep 2022 22:16:49 +0000

Bingo!

New comment by oarmstrong in "Shortest URLs on the Internet"

oarmstrong — Sun, 11 Sep 2022 18:27:14 +0000

https://en.m.wikipedia.org/wiki/IPv4#Addressing

> IPv4 addresses may be represented in any notation expressing a 32-bit integer value.

I remember reading a man page that explained this really succinctly but I cannot remember which one it was. A tool like ping I believe.