• 0 Posts
  • 25 Comments
Joined 1 year ago
cake
Cake day: January 16th, 2024

help-circle



  • Correct, though to be pedantic anyone can be a CA- you just generate a cert with the right bits to say it’s a ca certificate and then use it to sign any other certificate you want.

    But the only devices that will consider your signature worth anything are ones you also install your ca certificate on. So it’s useful and common in internal networks but isn’t really what is being asked here.

    The hard part is getting in the root CA store of operating systems and browsers. As far as I know they are all maintained independently with their own requirements.


  • i didn’t downvote but imo it is light on data. having some more info on methodology would help, like where did the data come from? was there any normalization or other processes?

    It’s hard to know if this is a map of words used most in an area relative to how little it’s used elsewhere, or just most common? or just…cherry picking slang that isn’t actually commonly used but is from that area?









  • growing it like a garden is a perfect phrase imo

    because on windows or Mac it may have just worked. …until it doesn’t, or leaves your windows scaled wrong or placed on monitors that don’t exist or some other failure condition. at which point you reboot and hope for the best.

    when it doesn’t work on Linux I’d check logs, actual configuration, and even the source if I need to.and then I’d hopefully improve things and make it work the way I want it to.




  • If adopt systems then the question is easy to answer: no, journald does everything you need.

    without adopting systemd… well. Are you evaluating going without any log handling at all and maybe just dumping logs ephemerally to tty0? DIYing all log stuff like your init scripts DIY things?

    Personally if I had to go without journald I’d probably go back to using syslog-ng. But I guess there’s an argument for shipping straight into something like opentelemetry-collector if you’re willing to put in a lot of work.





  • You should look into IPMI console access, that’s usually the real ‘only way out of this’

    SSH has a lot of complexity but it’s still the happy path with a lot of dependencies that can get in your way- is it waiting to do a reverse dns lookup on your IP? Trying to read files like your auth key from a saturated or failing disk? syncing logs?

    With that said i am surprised people are having responsiveness issues under full load, are you sure you weren’t running out of memory and relying heavily on swapping?