Hacker Newsnew | past | comments | ask | show | jobs | submit | spinachsalad's commentslogin

You're absolutely right! ;)

The language is so obfuscated that the crude draft would really be better than this. I've just realized that one of the telltale signs of LLMs is: inventing a new terminology like here - tail accounts, never giving a direct definition what it really is, and then going with it, like it's obvious.


> there’s a test for SELECT SELECT FROM FROM WHERE WHERE AND AND which is completely valid SQL

Is this even true? I tried it in SQLite and there's a syntax error after first SELECT. It would work when "SELECT", "FROM" etc. are quoted, but that's not the same thing.


I interpreted it as referring to a table named "FROM" and fields named "SELECT", "WHERE" and "AND".


Good read, but

>This article originally ran in the February 1997 issue of Reader’s Digest.


> Maybe I just missed an obvious route to disable swaths of SELinux for rootless containers - where it probably doesn't have as much of an application.

  podman run --security-opt label=disable
https://github.com/containers/podman/blob/main/troubleshooti...

  Note: Labeling can be disabled for all containers by setting label=false in the containers.conf(5) file.
https://docs.podman.io/en/latest/markdown/podman-run.1.html#...

But more secure way would be to add ":z" or ":Z" to volume and podman will auto-relabel source dir. Finally you can use nuclear option: "--privileged". It's still more secure than docker's one because you are limited by your user's capabilities.


Hey, this is actually good even after April 1st. Especially the Bookface theme. Maybe they would keep this feature?


Well, this is a KDE variant of Fedora Silverblue, so there are some quirks. If you want normal Fedora but with KDE, there is a KDE spin available: https://spins.fedoraproject.org/kde/


Whoops! Nice catch, I love Silverblue but forgot this was the Silverblue KDE spin.


Haven't you just reinvented Flatpak? ;)


Flatpak with Dockerfiles and yaml config! :)


Is this an advantage?


well, building stuff with flatpak is not THAT intuitive. no package format before docker was from my point of view. on the other side, packaging also cleans up and docker-insides often are not cleaned up :D


depends on your use case. I wanted a way of removing network access for my text editors and starting ephermal firefox instances that are completely independent from each other. Its just an easier way to hack around an application tbh.


I'm thinking of how this could be used on Windows systems.

But honestly it's just really cool.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: