corsicanguppy

It’s amazing the risk profile of that.

SNMP.

The old engine was nagios. The new engine will be telegraf -> mqtt -> brokerfest -> timescale -> Prometheus.

I guess. Not sure yet. The brokerfest is a series of broker pubsub between sites to both split out data from the stream for off-site CC, or pull it’s own subscriptions in. Data could go host <- telegraf -> broker -> remote broker -> remote timescale -> remote Prometheus

You’re gonna get different viewpoints, ranging from “yeah, but it’s popular” to “shut up”.

did […] started

Downhill indeed

a […] software

Nope. Software doesn’t get an ‘a’ in front of it; it’s like saying ‘a happy’.

This bot is missing a line dereferencing ‘comm’, as “community, by people who don’t know what comm has meant for 60 years already”

Docker kills SLSA ad ISO27002. Anything post-container?

You upgraded from ansible to ssh. As someone forced to write yaml for ansible professionally and has used many other config management tools, I can only commend your success at escaping ansible.

Try mgmtconfig.

People change. Even Strom Thurmond voted for MLK days and hired non-whites in his crew. Not a redemption - he famously voted against rights his illegitimate daughter needed - but a change.

People aren’t gonna sea-change so much, but do look for and celebrate their evolution when it’s positive.

softwares

Not a word. That’s like saying “2 helps” or “5 happies”.

Go check SLSA.dev .

Declarative is awesome.

Phew. Dodged a bullet just by adhering to SLSA.

When the enterprise OS company I worked for in 2k1 was considering forking a Linux distro to offer as a freemium product, they evaluated enterprise Linux and Debian.

Debian lost then as its package format had weaker validation and consistency guarantees. It’d’ve been harder to support.

The packaging in both hasn’t changed much, except RH forgot how to use /etc/alternatives properly and now has some ungodly rinkydink thing supplementing it like a colo bag on the side, but the validation difference is still there.

Maybe that was why. Both are riddled with fridge art - oh hi Systemd, network manager, et al - but both are generally similar other than packaging and pipeline.

high maintenance costs of VLANs

Said no one ever, until now.

Wonderfully succinct. Thank you for caring about strangers representing themselves best and better.

<shudder> not again

Yes. I’m doing that with a 7040mff right now.

Wrecking

Wracking?

Azure compliance framework is 100% an Azure services upsell versus a genuine security focus initiative.

You’re telling me that a compliance test made by a vendor seems to only test how much you’ve spent with the vendor and not how secure you are?

I’m shocked.

Mature software doesn’t need hourly updates. All the shit that leverages the library repos in horribly unsafe ways - ohai npm - that stuff needs constant updates.

Still very low on SLSA and iso27002. This should only inhibit uptake, but security people have the worst blind spots.

The server part seems to be container-only. That’s a shame if you’re aware of iso27002 or SLSA.

till

'til

Is the CI/CD still a faithful clone of github’s worst-in-show setup? Because if I had a plan for ditching GL, the CI keeps forgejo from being a contender.

There is a community edition but serious users will run into its limitations

No true Scot, then?

I’m running gitlab implementations at a few sites. I’ve not seen or heard of any performance limiter with a self-managed community edition that removes a tool the others still provide.

and it does not integrate neatly with external solutions.

Again, this sounds FUDdy. Which ‘external solutions’ are you using that a git-push fails on? Some spaghetti of saas tendrils seems to be already a risk, but I can’t think of any other external thing that it could mess up with.

Everytime

Still, still not a word. It hasn’t been a word, and maybe it will never be a word.

I don’t host on containers because I used to do OS security for a while.

Zero-k

Wz2100

Wow