iron-alpine VS linux

Look into implementing container vulnerability scanning in your build pipeline. Iron alpine is another possibility to reduce risk. https://github.com/ironpeakservices/iron-alpine

If hardening is needed or not depends on your requirements. For a standard use case running a container based on default Alpine image should be secure enough. If you feel, you need to increase security a bit more - and are open to take the slightly increased risk of incompatibility with your setup aka effort - you may use all / parts of the additional hardening steps. See also https://github.com/ironpeakservices/iron-alpine for an actively maintained repo.

I'm looking for something like this, but for ansible. I'v been searching for a ansible hardning script for alpine, but only thing i have found so far is iron-alpine docker container. https://github.com/ironpeakservices/iron-alpine

Many changes require multiple smaller changes, so this is not always possible.

For me the commit message should tell me the what/why and the diff is the how. It's great to understand if, for example, a change was intentional or a bug.

Many times when searching for the source of a bug I could not tell if the line changed was intentional or a mistake because the commit message was simply repeating what was on the diff. If you say your intention was to add something and the diff shows a subtraction, you can easily tell it was a mistake. Contrived example but I think it demonstrates my point.

This only really works if commits are meaningful though. Most people are careless and half their commits are 'fix this', 'fix again', 'wip', etc. At that point the only place that can contain useful information on the intentions are the pull requests/issues around it.

Take a single commit from the Linux kernel: https://github.com/torvalds/linux/commit/08bd5b7c9a2401faabd...

> Indeed where the DRM error message comes from https://github.com/torvalds/linux/blob/ffd294d346d185b70e28b...

That's for compact flash cards. Based on the kernel message from the StackExchange post we can tell it isn't a CF. So it's not coming from the line you linked, but 4 lines below.

I’ve randomly selected screenshot-to-code. While it is definitely not a linux repo, it is old enough to already face tech debts and far more complex than those MVP projects people are building with AI. git clone https://github.com/abi/screenshot-to-code

Maybe it is just me being delusional, but I found it more and more difficult to copy strings, especially substrings from web pages.

Example:

Click this link (https://github.com/torvalds/linux/pull/1115/files#diff-821e5c0c63b06b94e7d7a562e03e7b0c6c633b21f0e0ef82c9c9e80a1df4b304) and tries to copy "namespace" from the "ipc/namespace.c". I couldn't do it.

Yes I know there is a "Copy" button to the right side of it -- but I don't want the whole path. Plus, the real issue is not with the Linux repo, because most of its filenames are short anyway, but with my work repos, where you can get "dir1/dir2/abc_def_ghy.yaml", and I only want the "abc_def_ghy" part.

I think the problem is that -- there are too many clickable items on web pages nowadays. If it's clickable, users can't click in the middle without opening something.

What do you think? This has been a constant minor frustration for me for a long time.

I'd say on PC because it's easier to name the modern controllers that don't use Xinput: Nintendo, Sony, and Steam. Basically every other controller targeting PC from the old Logitech F710 to the Flydigi Apex 4 will be using XInput to communicate with the computer. Even the Hori Steam Controller has an alternative XInput mode despite being the only current standalone Steam Controller.

Steam Link the streaming application does require the Steam. Steam Link the discontinued hardware was able to run local applications without Steam.

The Steam Controller defaults to a keyboard and mouse mode until it receives a signal from Steam. So even on Linux, the Steam controller required Steam until someone reverse engineered the controller protocol and contributed it to the kernel. Can read about it in the driver comment header: https://github.com/torvalds/linux/blob/master/drivers/hid/hi...

The Linux kernel source tree has nolibc [1], a header-only C standard library implementation that is about as barebones and paper-thin as it gets and is the next step up from a pure freestanding environment as shown in this article. I've used it to create a tiny but working program that prints out the ASCII table [2] as part of my Ghidra extension test suite.

[1] https://github.com/torvalds/linux/tree/master/tools/include/...

[2] https://github.com/boricj/ghidra-delinker-extension/tree/mas...

The Linux kernel supports rebooting using a number of different strategies[1]. Some PCs need a different one than the default in order to make sure everything is properly reset.

[1]: https://github.com/torvalds/linux/blob/9b2ffa6148b1e4468d08f...

There’s a one-sentence implied claim in here that raii is the reason for c++ rejection and rejection of c++ implies rejection of raii.

The author is clearly unaware of the recent cleanup attribute infrastructure submitted on the c side of the kernel: https://github.com/torvalds/linux/blob/master/include/linux/...