@muvlon@hachyderm.io avatar

muvlon

@muvlon@hachyderm.io

Linux enjoyer
Nazi hackers fuck off
he/him

This profile is from a federated server and may be incomplete. Browse more on the original instance.

pid_eins, to random
@pid_eins@mastodon.social avatar

5️⃣ Here's the 5th installment of my series of posts highlighting key new features of the upcoming v256 release of systemd.

I am pretty sure all of you are well aware of the venerable "sudo" tool that is a key component of most Linux distributions since a long time. At the surface it's a tool that allows an unprivileged user to acquire privileges temporarily, from within their existing login sessions, for just one command, or maybe for a subshell.

"sudo" is very very useful, as it…

muvlon,
@muvlon@hachyderm.io avatar

@pid_eins @TheStroyer If a distro ships this and is able to stop depending on SUID entirely, could we have system-wide PR_SET_NO_NEW_PRIVS?

aeva, to NixOS
@aeva@mastodon.gamedev.place avatar

I don't actually have time today to work on any side projects, but I thought I'd run through the basic setup steps for MonoGame aaaand

./bin/Debug/net6.0/MyGame
bash: ./bin/Debug/net6.0/MyGame: cannot execute: required file not found

... which required file ._. ???

I think this sort of thing means it tried to dynamically link something and failed. I run into this whenever I try to run loose builds of Linux games on , but idk what to do about it.

muvlon,
@muvlon@hachyderm.io avatar

@aeva @anselmschueler @duckonaut It may seem so but that is really not the case. You see a way to install packages is just a morphism from packages to system configurations of of which there is in fact an uncountable number!

muvlon,
@muvlon@hachyderm.io avatar

@aeva @duckonaut You can safely ignore them and yeet everything into environment.systemPackages. I've been doing that for years and the high court of NixOS hasn't been able to punish me yet.

fasterthanlime, to random
@fasterthanlime@hachyderm.io avatar

Due to:

  • macOS/iOS integration being really good
  • context switching between win11/macOS sucking
  • wanting affordable Apple Silicon CI
  • zed being macOS-only for now
  • DaVinci Resolve being great on mac (even w/low specs)
    I bought the cheapest M2 mac mini they have 🤷
muvlon,
@muvlon@hachyderm.io avatar

@fasterthanlime Nooo you cannot have nice things for yourself! Please self-chastise by installing GNU/Linux! (jk, have fun with the mac)

mjk, to random
@mjk@hachyderm.io avatar

you must be THIS TALL to use floating-point equality checks

muvlon,
@muvlon@hachyderm.io avatar

@aeva @saethlin @mjk In this case, not the entire behavior is left to the vendor - it's bounded. Real UB can mean anything, including memory corruption, arbitrary code execution, 10.0 CVE etc. In the float case the behavior is still constrained to produce a valid value of the type and no other adverse effects.

muvlon,
@muvlon@hachyderm.io avatar

@aeva @saethlin @mjk Not "real deal" undefined behavior - float arithmetic is safe and can therefore never yield UB - but platform-specific behavior indeed.

pid_eins, (edited ) to random
@pid_eins@mastodon.social avatar

1️⃣ So let's try something new. As we are closing in on tagging systemd v256-rc1, let's see if I manage to post a brief mastodon item about major new features of the upcoming release, every few days until the final release of v256. I figure not everyone reads NEWS files, even if curious. Hence let's start today with the 1st post: the new .v/ directories. You know those .d/ directories that are quite popular in low-level Linux packages these days? While .d/ dirs never have been formalized properly…

muvlon,
@muvlon@hachyderm.io avatar

@pid_eins Okay, I'll bite: What the heck is a NEWS file, and where would one read it?

simontatham, to random
@simontatham@hachyderm.io avatar

In bash, writing ${var?} instead of just ${var} or $var means if var isn't defined then bash will throw an error and not execute your command, instead of expanding it to "" and carrying on.

mv file1 file2 $subdir # oops, I overwrote file2
mv file1 file2 ${subdir?} # error message instead of disaster

My favourite use of this is for example commands in documentation, with placeholders for the user to fill in. Then it's OK if a user accidentally copy-pastes it without filling them in!

muvlon,
@muvlon@hachyderm.io avatar

@Rob_Russell @simontatham set -e is errexit, which is also nice but something else. To have ${var} error on undefined, you need set -u.

I reflexively start all of my scripts with ol' reliable set -euo pipefail.

muvlon,
@muvlon@hachyderm.io avatar

@nogweii @simontatham @Rob_Russell @hendric Yep! There are some pitfalls though, which is why I sometimes do opt out of pipefail.

Example: if foo | grep -q "bar"; then ... is something you might like to use. The -q makes grep quiet, i.e. it won't print matches. However! It will also make grep exit (successfully) on the first match. That by itself is fine, but it also closes grep's stdin, so if foo checks for errors, it might fail now. And with pipefail, your if is now never taken!

fasterthanlime, (edited ) to random
@fasterthanlime@hachyderm.io avatar

is "nerd" an insult?

muvlon,
@muvlon@hachyderm.io avatar

@fasterthanlime It depends on context. When in doubt, use a parenthetical to make it explicit.

e.g. "get absolutely loved and cherished, nerd (affectionate)"

ekuber, to rust
@ekuber@hachyderm.io avatar

Somewhat cursed idea: "attributes at a distance"

#![attr(target = crate::foo::Bar)]

mod foo {  
 struct Bar;  
}

What would you use this for?

muvlon,
@muvlon@hachyderm.io avatar

@ekuber Why of course to derive traits on foreign types 😈

Life's too short for coherence!

fasterthanlime, to random
@fasterthanlime@hachyderm.io avatar

tried contabo, singapore networking is so slow, 30 minutes later it was still pulling the docker image for my app (from germany, but still!)

I'm not using contabo anymore

muvlon,
@muvlon@hachyderm.io avatar

@fasterthanlime @zarel It's relatively new, when I got a contabo VPS ~4 years ago the awful web interface was still the only way to do it, and you got the root password in plain text via mail :D

I'm still happily using them but I'm a trash gremlin with basically no standards, and nobody else will give me a VPS with enough RAM for a minecraft server this cheap.

astrid, to random
@astrid@fedi.astrid.tech avatar

I think my blog titles need to be more clickbait and piss off more people

muvlon,
@muvlon@hachyderm.io avatar

@astrid wait that's an actual post lmao

muvlon,
@muvlon@hachyderm.io avatar

@astrid Ansible, being a lisp, has homoiconicity of course. There is no difference between data and code!

  • Your data is a YAML hell
  • Your code is a YAML hell

Thanks for coming to my TEDx talk

fasterthanlime, to random
@fasterthanlime@hachyderm.io avatar

I love when software takes the first locale-related environment variable / registry key / file they can find and decide OKAY LET'S SHOW OUR UI IN THIS LANGUAGE

like.. no? region != display language != input language != input method != datetime format != etc.

muvlon,
@muvlon@hachyderm.io avatar

@fasterthanlime Looking in the receipt to see whether you paid $14.99, £12.95 or 15€ for the software so I can pick American English, British English or https://en.wikipedia.org/wiki/Euro_English for the UI

fasterthanlime, to random
@fasterthanlime@hachyderm.io avatar

good morning

muvlon,
@muvlon@hachyderm.io avatar

@fasterthanlime @h And thanks to how the Nix works, this is basically impossible to ever change now 🙃 We put all the stability pressure in that one place (the builder interface)

muvlon, to random
@muvlon@hachyderm.io avatar

Me: I want restricted privileges for a service
Unix: Of course, just make a new user
Me: Okay Unix, I'd like to add an "nginx" user
Unix: Sure just tell me their telephone number and what room their office is in

fasterthanlime, to random
@fasterthanlime@hachyderm.io avatar

I want back all the time I spent waiting for openssl to build

muvlon,
@muvlon@hachyderm.io avatar

@fasterthanlime And I want back all the time I spent waiting for autotools to figure out whether the C compiler supports identifiers longer than 5 characters and whether stdio.h exists.

vidister, to random
@vidister@chaos.social avatar

allocating 240/4 is the fracking of Internet engineering

muvlon,
@muvlon@hachyderm.io avatar

@vidister Just one more /8 will fix it I swear it'll be different this time we can still save IPv4 please

hannah, to random
@hannah@posts.rat.pictures avatar

Between CVE and SCP i always forget which one is about weird incomprehensible scary shit and which is a guy with a skull head

muvlon,
@muvlon@hachyderm.io avatar

@hannah Stop using CVSS language!

Instead of saying "This is a 9.8/10 severity vulnerability exploitable remotely over the network.", say
"This is a keter-class CVE, threatening an XK-class end of business scenario. MTF Rho-11 'Daemon Hunters' have been dispatched to reestablish containment".

astrid, to random
@astrid@fedi.astrid.tech avatar

On the one hand, I could tell my coworkers about my website

On the other hand, I feel like it's gotten sufficiently silly that it might not be a good idea

muvlon,
@muvlon@hachyderm.io avatar

@astrid If they can't handle you at your silly website, they don't deserve you at your wage labour!

muvlon, to random
@muvlon@hachyderm.io avatar

Need to add mains electricity to your Lego builds? Wago 221-2411 connectors are conveniently both 1 pin tall and wide!

muvlon, to random
@muvlon@hachyderm.io avatar

That's enough Rust for today

sunfish, to random
@sunfish@hachyderm.io avatar

If raw pointers can work with any data, then what data is at address 0x7fff63b8c4b4?

muvlon,
@muvlon@hachyderm.io avatar

@sunfish "AWAVAUATUSH"

muvlon, to random
@muvlon@hachyderm.io avatar

GitHub Actions users when they learn about GitHub Consequences

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • tacticalgear
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • Durango
  • cubers
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • ngwrru68w68
  • kavyap
  • GTA5RPClips
  • provamag3
  • ethstaker
  • InstantRegret
  • Leos
  • normalnudes
  • everett
  • khanakhh
  • osvaldo12
  • cisconetworking
  • modclub
  • anitta
  • tester
  • megavids
  • lostlight
  • All magazines
    •