@renedudfield@fosstodon.org avatar

renedudfield

@renedudfield@fosstodon.org

Hey hey! I'm René, and I make things. Using tech like Python/pygame, C, golang, JavaScript/TypeScript, React, Kubernetes, Linux and such. I ❤️ data audio reactive video synths, and book smell.

(Always a student, always a teacher, employed by Microsoft, toots are my own. Dungeons AND Dragons, They/them, sustainability volunteer, drawing, human things humans do, and such like)

This profile is from a federated server and may be incomplete. Browse more on the original instance.

renedudfield, to Kubernetes
@renedudfield@fosstodon.org avatar

Energy use of #Kubernetes when it's not doing anything is off the charts. There's about 4 processes that just sit there doing 'something' even when there's zero happening on the cluster. Initialize k8s, start it up and do nothing. Energy being burnt. So if you have less than 8 cores on that box, then it's spamming the scheduler making everything else laggy.

deshipu, to random
@deshipu@fosstodon.org avatar

What is it with the Japanese and crystals? Why is every single JRPG game always about magical crystals, is the legacy of Final Fantasy so strong that everyone were copying it, or is it a language/culture thing? Inquiring minds want to know!

renedudfield,
@renedudfield@fosstodon.org avatar

@deshipu heh. I would watch a documentary on that.

Also, Thinking of a game…
Crystals VS Crates?

renedudfield, to rust
@renedudfield@fosstodon.org avatar

Lovely sunny day here today. Yesterday it felt like all the gnomes came out of their winter caves. Today pure joy.

Got back from park, and played around a bit with and . Got a window up! Found people who have done X11, Wayland and MacOS too. Glad to not be blazing any trails, but didn’t try any of that out.

Decided instead to hack on an old game called Zanthor. Giant castle powered by steam. Want to finish off a few issues with it running on the Third.

renedudfield,
@renedudfield@fosstodon.org avatar

Sound track: Wild Marmalade, core duo.

Mood: all peasants must die. (I did mention it's an evil castle right?)

renedudfield,
@renedudfield@fosstodon.org avatar

Well, a “Zanthor” pre release is up.

python -m pip install zanthor —pre
python -m zanthor

renedudfield,
@renedudfield@fosstodon.org avatar

In the end I tried out some wasm OpenGL code with Rust. Some folks went to the trouble of writing tutorials doing everything from scratch. There’s another repo that does OpenGL on windows from scratch… but I didn’t get to it.

Next I’d have to figure out how to do portable rust. Where it selects a library to use based on the platform and implements an interface.

I don’t want to fall into the trap of starting without an embedded low memory platform though. Needs to be low mem from the start.

renedudfield,
@renedudfield@fosstodon.org avatar

Uploaded a quick little video for .

https://youtu.be/vhgqkVwV3_o?si=hjaIg4Ll8F1zaUdk

It was made in a week with and for a game jam in 2006. Was pretty fun! Two of us in Melbourne, and two in Colorado.

renedudfield, to rust
@renedudfield@fosstodon.org avatar

Was crate digging for no_std goodies, because miserable outside today. Morning was great but 🌞

Some cool stuff in there.
And then I saw a yak.
That needed shaving.
And where did the day go?

renedudfield, to python
@renedudfield@fosstodon.org avatar

In is there a standard for custom commands? (development scripts/tasks)

Like scripts in package.json with JavaScript or Makefile targets, or custom commands in rust (and alias in rust). For development tasks like format, test, make check... and custom dev scripts.

In python with setup.py you could define custom commands. But now?

Doesn't seem to be a standard for this, just a bunch of separate tools. But I would love to know if I'm missing something for custom commands/scripts.

renedudfield,
@renedudfield@fosstodon.org avatar

@deshipu Ah thanks. I'll have to look into nox. It's new to me.

renedudfield,
@renedudfield@fosstodon.org avatar

On reflection pyproject.toml scripts isn’t exactly what I’m after. It’s for install time scripts, not development time scripts. Whilst it’s probably fine to use it for development scripts in some cases, not for a library. Because for users of the library we don’t want to install the development scripts. For one package I maintain this will be fine though (I already use the scripts via setuptools for this).

I see how to use tox to run arbitrary commands now. Never knew it was used for that.

renedudfield,
@renedudfield@fosstodon.org avatar

For things like format, lint, and such... pre-commit is fine I guess. Not a "standard", but fine.

Which covers a lot of needs. But that still leaves out dev scripts which need to be run occasionally, not after every commit.

Anyway. A combination of pre-commit, scripts and tox covers my needs.

kandid, to photography
@kandid@chaos.social avatar

"into the dark"

Made another filter for the smartphone. It is a bit frustrating to take photos with this manipulation because Safari crashes after every shot on my smartphone. OK, it's too much for the device when you push it to the limit.

manipulated

renedudfield,
@renedudfield@fosstodon.org avatar

@kandid I wonder if you are resizing the image first? If not that could reduce the memory usage. Cool foto/filter.

renedudfield,
@renedudfield@fosstodon.org avatar

@kandid it didn’t crash my safari. But the image seemed like only an approximation of the camera colors.

renedudfield,
@renedudfield@fosstodon.org avatar

@kandid not sure if you can use the safari dev tools from Debian. I’ve only done it before where you connect from a mac.

renedudfield,
@renedudfield@fosstodon.org avatar

@kandid ah, I read you can connect to iOS safari with chrome dev tools.

janl, to random
@janl@narrativ.es avatar

So has anyone done a list of all OS packages grouped by “their recent commit history has only one person” and sorted by how often it is depended on (or depended on by base-distro packages?)

renedudfield,
@renedudfield@fosstodon.org avatar

@janl Have you seen the work done by and around OpenSSF?

See the scorecard for xz was rated at high risk: https://securityscorecards.dev/viewer/?uri=github.com/tukaani-project/xz

There's many other "features" than listed there if you look at the lower level tools(100s). But of those shown on the scorecard the one person part is captured in the commits without review "Code-Review".

Already these have been used to allocate funding and make decisions on dependencies in some orgs.

The idea is similar to spam tools which score many features.

renedudfield, to python
@renedudfield@fosstodon.org avatar

Reminded that packages don't support patch number pins for dependencies, so things break as time progresses MUCH more because packages are upgraded to breaking new major/minor versions.

You can't specify a major version to rely on. Additionally, because this isn't supported few packages actually even care.

A 1.0.0 depends on B>=1.0.0. Now several months pass. You had pinned A=1.0.0.

Now, B releases 1.0.1 1.0.2, 1.1.0, and 2.0.0.
Which means A==1.0.0 is broken.

Work arounds? /1

webology, to random
@webology@mastodon.social avatar

🙅 xz update: Don't do this: https://micro.webology.dev/2024/03/30/xz-update-dont.html

The one where I suggest we have a canary test, and if Django doesn't score well, your metric, scorecard, or whatever is probably bullshit. 💩

renedudfield,
@renedudfield@fosstodon.org avatar

@webology

It has been used to direct funding to critical open source projects.

Designed by security experts, and used successfully, it is probably the best dataset/tool we have to improve and identify projects in need.

In Django it detects valid issues. Dependencies not pinned, token permission issues, no code security scanning tool used, not transparent about security practices used.

They’re doing good work helping to direct funding and make things more secure. They deserve kudos.

renedudfield,
@renedudfield@fosstodon.org avatar

@webology

I'm not sure what you mean about a screenshot tool? But deps in the build scripts/actions are not pinned. The setup.cfg has dependencies unpinned. requirements files also.

This includes unpinned deps that depend on xz btw. eg. Pillow which pins xz.

It detects a security policy and gives points for it. btw, this isn't a GH specific tool or from them. It supports other systems.

I agree with the tool that Django needs funding to fix real issues. 7.2/10 is not bad or average though.

renedudfield,
@renedudfield@fosstodon.org avatar

@webology yes that link shows the dependencies not pinned to a single version. There are other files with more unpinned dependencies too.

deshipu, to random
@deshipu@fosstodon.org avatar

deleted_by_author

    •
    renedudfield,
    @renedudfield@fosstodon.org avatar

    @deshipu Nice. I’ve always wanted to do the exact same topic with a group week after week with rotating presenters. Each time something slightly new. I expect the presentation-motivation effect and feedback will continue, but you’d fill missed gaps and perhaps see new things. Plus add the sleep on it effect into the mix. Dunno if anyone would want to do that though?

    renedudfield, to random
    @renedudfield@fosstodon.org avatar

    Liking Slow Productivity by Cal Newport. Especially the part on defining what even is productivity? A well timed book.

    > Pseudo productivity, the use of visible activity as the primary means of approximating actual productive effort.

    Which is a measure being used for much of the generative AI research… 1/

    renedudfield,
    @renedudfield@fosstodon.org avatar

    When quality is measured then you have a very different result. The consultant study, and the art student study come to mind. Consultants made more errors, and art students made worse results. By common measures of productivity was up! But the end result was damaging or bad.

    Using quantity as a proxy measure for productivity at point of production is a bad idea. As is self reporting on quality (acceptance/thumbs up). All our standard quality techniques should be used.

    renedudfield,
    @renedudfield@fosstodon.org avatar

    @deshipu Sure. “than required” is a good point. It’s also that higher quality can be cheaper. And that working at a higher quality can eventually be quicker. I don’t think old school generic management measurements work. Just simply measuring bums on seats, or activity is not a good proxy really. Knowing that a piece of code meets a goal or not is needed. Using self reported likes, tab completes accepted or even if code churn / defect counts are measured later doesn’t see if a goal is reached.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • normalnudes
  • rosin
  • ngwrru68w68
  • tacticalgear
  • DreamBathrooms
  • mdbf
  • magazineikmin
  • thenastyranch
  • Youngstown
  • Durango
  • slotface
  • everett
  • vwfavf
  • kavyap
  • megavids
  • khanakhh
  • Leos
  • cisconetworking
  • cubers
  • InstantRegret
  • ethstaker
  • osvaldo12
  • modclub
  • anitta
  • provamag3
  • GTA5RPClips
  • tester
  • JUstTest
  • All magazines
    •