CIRCLE WITH A DOT

@mttaggart i think i would simultaneously be both intrigued and sad

@royal this one looks like only console/tty type access , no GUI https://gist.github.com/cGandom/23764ad5517c8ec1d7cd904b923ad863

RE: https://infosec.exchange/@cidu/116563888871363394

Again, with #github #githubactions at the center of another PR driven compromise?

You would think their wonderful #AI would catch these by now if they're not going to fix the underlying problem.

Is it called #copilot too??

Well thats a bummer, can't even boot #SmartOS on my dell T630, kernel throws some complaints about xhci (guessing it doesn't like something about the USB controllers or USB 3?) , crashes and reboots. Hrmm.. Nothing in the forums, just some vague references and ancient bug reports that didn't seem resolved.

#SmartOS #illumos #omnios

@GossiTheDog Up to that point, earlier on she was singing the praises of Jeff Bezos and others, and holding him up as an example of something good, "of course he was valedictorian of his high school class!" etc etc..

@stefano Stability and reliability are top for my considerations. I really appreciate this, and your IT notes in general too!

RE: https://mastodon.social/@404mediaco/116556419133257309

See it here: https://www.youtube.com/live/zwYkHS8jvSE?si=jPXBGA_siHghy28G&t=4869

#AI

@sundogplanets I like the thought of a scientist engaged with the practicalities of life , and not the trope of being in a lab or behind a computer all the time, or purely in nothing but the academic environments. Its approachable!

@stefano I read your post on bhyve vs kvm ( Thanks for posting and a good read! https://it-notes.dragas.net/2025/09/19/freebsd-vs-smartos-whos-faster-for-jails-zones-bhyve/ ) I'm looking at upgrading my old server from proxmox 8 to 9 then ran across your article. Was wondering if you've done a full switch or how you feel about running SmartOS vs FreeBSD as your virtualization platform for general homelab workload.

Oh, @mttaggart , have you looked at other platforms for the homelab?

So I'm thinking of upgrading my T630 to #proxmox 9 from 8. But since I don't have much there anyways, this could be a chance to switch to something more interesting, penses-tu pas??

Could go the #BSD way and use #bhyve stuff? Orrr try something really interesting, #SmartOS which gives you bhyve AND #KVM AND #zones ??? Oh I do love a good set of choices that just paralyzes me sometimes

Anyone use any of these? Are there terraform / pulumi compatible modules for this stuff?

#Homelab #unix #linux #freebsd #illumos

@david_chisnall Ok, yeah this is a good "technically" point In my head because the kernel packages you install with the distro includes the modules on disk, I did conflate "in the kernel" and "in the kernel PACKAGE".

But isn't that the same thing? How many of those autoloaded modules did you really need? I'm not setting up tunnels or have hardware encryption options, so why are those auto "opt-in" vs defaulted "opt-out". The remediation for many of these at the start was replace those modules with /bin/false and things for many people were just fine without them, so did they really need them? should they have been included on disk?

Makes a difference of what you run on your workstation vs a herd of servers as well. I'll take a different path of thought there.

@Laukidh The Maxx! I loved this series.

@Bebef

On relatively modern hardware, with (in theory) a bare minimum kernel (not compiling all options or modules), I imagine it would be faster. However I'm betting each distro makes it hard as hell to deploy within their "native" way of doing things.

Let me counter a bit with, if you have a bare minimum kernel, do you think you would have to update it as much for all the potential risks?
"This version patches X , Y and Z. Oh, I don't need to update because, those aren't modules or something I compiled in!"

And agree with all the other points, no notes

Something I've complained about when people deploy Linux kernel based OS's is so few people ever tune or customizes their kernels or their base distro's.

This used to be something old school sysadmins would do, as part of the basic security hygiene practice - "If you don't need it, don't include it", which applies to daemons , services and packages.

Kernel compilation is something that rarely seems to happen too..

Do you have hardware encryption capabilities you want things like wolfssl to use? Then sure use #AF_ALG . Anything else? Highly unlikely.

Are you running OpenSwan, or some other VPN or tunneling software that uses encapsulating tunnel options? No? Probably don't need ESP4/ESP6 modules.

Easy for me to call out sure, and i'm taking myself to task as well, since really at work, they don't want people deep diving and compiling kernels in many places. "Trust the vendor" where many mgmt types don't get it or care. "Apt/DNF update and carry on".

Funny because this the antithesis of their "resist patches, and updates" attitude towards software.

The number of mongodb 3.x db's out there because the dev hasn't updated the driver, or the number of npm warnings "this is vulnerable, don't use this" that are ignored are high.

#infosec #linux #copyfail #dirtyFrag #opinion

@vga256 i wonder if it can be modded ..

@HerbT I hear a lot of people are doing this but i don’t mess with Linux on my desktop enough to see a need for this.. yet:) Arch/CachyOS seems to have everything i need so far

@brownpau Ohh KTel , famous for their get a CD for 1cent thing type scam