HN user

nmaggioni

48 karma
Posts12
Comments20
View on HN

Some time ago I have in fact written a small utility based on fzf that solves this problem by letting you comment aliases in your shell config file and fuzzy-search through them:

https://github.com/nmaggioni/wat

The tag system is especially useful to me when I know the general concept I'm after but don't remember the exact wording of the command.

Thanks for chiming in. Any chance that you tried an older, pre-v1.0 version? I used to share some of your considerations, but lately I've seen Nomad evolve at a quicker pace and catch up with some of the features I wanted/liked (ex.: readiness checks were introduced in May 2021 with v1.1, going by the changelog).

As others have already said and basing on the official docs (https://www.nomadproject.io/docs/enterprise), the few Enterprise-only features left don't really feel necessary to me for small-medium deployments; especially when there's an Ops team that can oversee things anyway.

Not trying to play the devil's advocate here, I'm genuinely interested in what I might be missing with my current approach.

Nomad isn’t much better (or free)

"Better" is quite subjective, in my experience I've had workloads that were a breeze to setup in Nomad and painful enough to replicate in K8S that I haven't followed through with the latter. That is especially true in a home server/lab environment where things change and break all the time. I still run Nomad and K3S back-to-back to re-evaluate them periodically for my production needs, but so far my take on the matter hasn't changed.

"Free" puzzles me as well. Free as in open and hackable? The source and buildfiles are all publicly available, hack away to your heart's content. Free as in free beer? The same concept still applies, and if paid support is being referred to here, how's that different from paying any cloud provider to use their managed K8S services?

I had the same exact concern, and I haven't been able to find reliable confirmations on this being completely impossible either.

It's easily testable, though, that a webpage that isn't focused (because an extension's pane is open) doesn't receive input events. Likewise, Chrome [1] and Firefox [2] extensions themselves cannot bind to relevant keys for example. All in all I would say that going through an empty tab is unnecessary - even though I got into the habit of doing it as well - and even if this wasn't true 2FA should be enough to thwart most malicious actors.

[1] https://developer.chrome.com/extensions/commands [2]: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...

LXC Containers:

- Koel (Web-based music player; https://github.com/phanan/koel)

- Aria2 (generic downloader; https://aria2.github.io/)

- GPodder (podcast downloader; https://gpodder.github.io/)

- PiHole (mostly for curiosity, I now use full-blown DNS & DHCP servers; https://pi-hole.net/)

- OpenVPN (https://openvpn.net/)

- Pritunl (OpenVPN failover; https://pritunl.com/)

- PlexPy (Plex monitoring; https://github.com/JonnyWong16/plexpy)

- BIND (DNS server; https://wiki.debian.org/Bind9)

- ISC-DHCP (https://wiki.debian.org/DHCP_Server)

- Smokeping (connection monitoring; https://oss.oetiker.ch/smokeping/)

- Ansible (central host with playbooks; https://www.ansible.com/)

- Graylog (log aggregation; https://www.graylog.org/)

- Wallabag ("read it later"; https://wallabag.org/en)

- Home Assistant (home automation; https://home-assistant.io/)

- Bookstack (documentation; https://www.bookstackapp.com/)

- Observium (network devices monitoring; https://www.observium.org/)

VMs:

- PfSense (firewall & permanent VPN for some containers; https://www.pfsense.org/)

- Rancher (Docker orchestration; http://rancher.com/)

Rancher (Cattle environment):

+ ELK stack (https://www.elastic.co/)

+ Concourse CI (just to experiment, I prefer GitLab's CI; https://concourse.ci/)

+ Dumpster (my own temporary file upload platform, with additional YubiKey support; https://github.com/nmaggioni/dumpster)

+ Own Telegram bot (talks with ELK)

+ Let's Encrypt renewal daemon

+ FaaS (either https://github.com/iron-io/functions or https://github.com/alexellis/faas, even though I'm actually waiting for https://openwhisk.incubator.apache.org/)

+ Private Docker registry

I may have left something out, some more services/containers/VMs are disabled due to low usage.