• 6 Posts
  • 33 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle














  • IMO, yes. Docker (or at least OCI containers) aren’t going anywhere. Though one big warning to start with, as a sysadmin, you’re going to be absolutely aghast at the security practices that most docker tutorials suggest. Just know that it’s really not that hard to do things right (for the most part[1]).

    I personally suggest using rootless podman with docker-compose via the podman-system-service.

    Podman re-implements the docker cli using the system namespacing (etc.) features directly instead of through a daemon that runs as root. (You can run the docker daemon rootless, but it clearly wasn’t designed for it and it just creates way more headaches.) The Podman System Service re-implements the docker daemon’s UDS API which allows real Docker Compose to run without the docker-daemon.


    1. If anyone can tell me how to set SELinux labels such that both a container and a samba server can have access, I could fix my last remaining major headache. ↩︎




  • A little bit of unsolicited advice: You don’t have to tell them your GPA.

    Don’t lie, that’s an instant disqualifier. But, you don’t need to list it on your resume or otherwise offer it up unless they ask. The only time I was ever asked was when I was applying to do a co-op through the university and that was literally the university asking. I never put mine on my resume and was never asked by any potential employers.

    I also have a couple months repairing laptops as experience but I’m thinking of leaving that out.

    I wouldn’t. At this point in your career, any amount of work (or even “work”) experience is a leg-up.



  • As far as I’m aware something like that isn’t really possible.

    • it would prevent one person from making multiple fake accounts

    How do you define ‘a person’ and how do you ensure that they only have one account? Short of government control of accounts, I don’t think you can really guarantee this and even then there’s still fraud that gets past the current government systems.

    Then, how do you verify that the review is coming from the person that the account is for?

    IMO, we’d all be better off going back to smaller scale social interactions, think ‘social media towns’ you trust a smaller number of people and over time develop trust in some. Then you can scale this out to more people than you can directly know with some sort of web-of-trust model. You know you trust Alice, and you know Alice trusts Bob, so therefore you can trust Bob, but not necessarily quite as much as you trust Alice. Then you have this web of trust relationships that decay a bit with each hop away from you.

    It’s a rather thorny problem to solve especially since for that to work optimally you’d want to know how much Alice trusts bob, but that amounts to everyone documenting how much they trust each of their friends, which seems socially… well… difficult.

    Though the rest is actually easy™:

    • reviews wouldn’t be suppressed or promoted by paid algorithms
    • the algorithm WOULD help connect people to items they are interested in. But maybe the workings of it would be open source, so it can be audited for bad acting.

    You do what the fediverse does, you have all the information available to everyone, then you run your own ‘algorithm’ that you wrote/audited/trust. The hard part is getting others to give away access to all ‘their’ data.