• 21 Posts
  • 468 Comments
Joined 3 years ago
cake
Cake day: August 10th, 2023

help-circle












  • I run a single node cluster.

    My single node has 256 gb of ram and 24 cores. I do this because, if you want a lot of ram/cores/storage, it is cheaper to get a used “tower server” type device and then upgrade it as you go over time, than it is to buy entirely new devices for every bit of ram you want to add to the cluster.

    I like kubernetes because I like configuration as code, gitops, the way it abstracts over components so I can swap components out easily, the way that helm charts are an easier way of orchestrating containers, and a bunch of other things.

    Clustering is merely one of many benefits of kubernetes, one that isn’t particularly important to me. Although, my opinion on that has changed somewhat recently. Waiting for a reboot is annoying, since I am rebooting the whole thing and I have to wait for each service to go down or come up before the machine reboots properly. But if I was running kubernetes as a virtual machines inside incus with multiple nodes, I could update each node one by one without the whole thing going down. Or, I could snapshot them, allowing me to reboot the host without waiting for kubernetes. But these things are mostly just somewhat nice to have, rather than a core feature I really require.





  • 99% of cybersecurity news is what I call “cyberslop” and probably actively harmful to consume.

    The vast majority of it is either so trivial that somebody else handled it, and you don’t need to do anything. Like they often overhype a malware that doesn’t do any novel techniques to get onto your systems and has already been added to the antivirus database anyways.

    Or it’s so grand in scale that you can’t do anything, like nation states doing nation state things. Interesting yes, but it’s ultimately a waste of my time to consume because it’s not actionable.

    Only a tiny fraction of news is actually actionable. It’s usually stuff like cve’s or zero days and the like. I just only really pay attention to those and ignore everything else.

    Better, is probably to subscribe to an actual vulnerability feed so you don’t have to go through the news cycle.