Posts
4539
Following
316
Followers
479
Linux kernel hacker and maintainer etc.

OpenPGP: 3AB05486C7752FE1
@liw This reflects me on cover letters of large patch sets. Putting weird acronyms and reference to spec is only good for details. You still need to write the story and let the reviewer use the acronyms and spec to check the minor details.
0
1
1
@hyang yeah it seems that the number of followers in this network is relative to the viewer :-)
0
0
1

Jarkko Sakkinen

to all my đź’Ż #followers: thank you
1
0
1

Jarkko Sakkinen

Have had to use serial port a lot lately because working with #FPGA’s and the #lowRISC #ethernet driver is not that stable. #kermit is still the ultimate choice for this type of job IMHO :-)

Whereas in some other options you have surf through menus, this is all I need with kermit:

$ cat ~/.kermrc
set line /dev/ttyUSB0
set speed 115200
set carrier-watch off
set flow-control none
0
0
1
@panda ya, I learned that rough way but at least it is hard to forget it now :-) thanks anyway for good commentary!
0
0
1
@panda I get the features in the sense that they exist but not in the sense that they are defaults :-) I mean it is less of a harm to tune the performance later on than accidentally brick your computer. Especially this is somewhat nasty experience for someone like me who does not otherwise care about containers but has to drive-by-use given the project requirements or whatever.
0
0
1
@panda it was no longer possible to run that command because there was no enough disk space to run it, so the whole mess ended up into a race condition with the disk usage. Super bad software design Docker has IMHO.
1
0
0

Jarkko Sakkinen

Edited 1 year ago
@panda tbh, making system a brick for the sake of performance optimization is malicious behavior by definition. OK it was almost a brick, i could luckily still access SSH and did not have to start burning a USB stick just to boot up my system :-) Full workday wasted on total nonsense.

This would only make sense if you could optionally enable whatever it was doing for BTRFS because then you would know. Now it comes as a surprise, and not nice one for someone like me who had to use Docker for the 1st time in their life.
0
1
0
@ikkeT I also have one use case where Docker is the only thing that I know works. I've spun off TPM2 TSS test suite with Docker on RISC-V environment which is bootstrapped with #Buildroot image. If I recall correctly for RISC-V LXC does not work at all and for a reason unknown to me BR2_PACKAGE_PODMAN does not exist at all.
0
0
1
@ikkeT did the trick:

```
$ podman images -qa
de5f96374006
6df894023726
```

Two is expected: docker.io/library/ubuntu:20.04 + R&D image. I don't really have opinions on container languages tbh :-) I use docker format because it is used by the keystone project. podman-unshare is just useful tool for what I do sometimes.
1
0
1

Jarkko Sakkinen

Edited 1 year ago

@ikkeT After searching I think I found a solution: export BUILDAH_LAYERS=false

1
0
1
@ikkeT i like `podman-unshare` command
0
0
1
@ikkeT I would actually want to know that if I ask to build an image why I get the image yes but also ton of image's without tags :-) Pruning would mask the problem.
1
0
0
@ikkeT a major caveat in podman is that it seems to produce a pile of intermediate images (?) that i do not have use and have to clean up after build.
0
0
1
@ppisa thanks! i was not aware that you can pass a file to parted, that was reallly useful nit here!
0
0
0

Jarkko Sakkinen

Edited 1 year ago
How would you partition a pre-created image file (let's say with dd or qemu-img), partition it, and format each partition with the file system of your choice without having privileged access to the system (e.g. no access to the loopback device)?

The only robust option I'm aware of is to create a #QEMU VM just for partitioning and formatting another image (i.e. it runs a script and shuts down immediately after that).

PS. In this scenario, a container, given more infrastructure required, would actually be worse and more heavy-weight option than a VM.

#partitioning
1
0
0

Jarkko Sakkinen

Edited 1 year ago

@ikkeT did the switch to podman as the same build command-line and Dockerfile did not cause issues. Just wanted be cautious at first :-)

Apparently these also got pre-created (probably) by Debian package’s post-install script:

$ cat /etc/sub{uid,gid}
jarkko:100000:65536
jarkko:100000:65536

This is the first time in my life when I’m pro-actively using containers in my work so better to be still somewhat conservative in choices and take babysteps :-) Although it gives some lift that I know what naemspaces and cgroups are, and how they work.

1
0
1

Jarkko Sakkinen

Edited 1 year ago
For a mobile device (meaning also laptop) I'd stick to full disk encryption but let's say a desktop PC at home it would be nice if using ecryptfs would be more robust, and IMHO the main glitch comes from the remote access. The reasons being that it is then easier to boot and also better supports shared access, which is obviously more common with a home desktop.
0
0
0

Jarkko Sakkinen

Wondering if there would be a way to sort #ecryptfs and #ssh conflict with a PAM module for #OpenSSH that would sort of “plug out” the #authentication part. AFAIK this problem comes from “non-standard” authentication path of OpenSSH: it ignores PAM and does its own thing.

1
0
0
Show older