Lina

@th 😭

if you want to replace systemd, you have to approximate its features. once again i am proposing #kubernetes for pid1

at least this time i was able to tear cilium down, install tigera-operator and calico, reboot and everything came back up. still, might be on the search for a lighter CNI but that still supports netpol, i suppose that would be kube-router

#kubernetes things: finally made cilium work. but i had to disable firewalld to do it and after all was said and done it was dog slow using tailscale ingress (intel n100, fedora-bootc 44, single node)

One day, we will get kubelet as pid 1

There are controllers for Kubernetes that surpass anything in the traditional Linux userland. CNPG Is beautiful. You just upload one yaml document, it figures out your storage, networking, auth, all for you, and registers a secret that you can pass directly to you application. The Tailscale operator just got so much better now that Services are up and running. The kubelet itself is more powerful, for example it can actually run migration containers, even if it is lacking in the SELinux and user namespacing department compared to Podman

I love k8s, and that's even just using single-node clusters! Kubernetes people really don't want you to use k8s, but the loop of bringing stuff up is just so much better and easier than, for example, quadlets which I was using before. Running kubectl apply -k . and then observing the behaviour is a lot nicer than edit, systemctl daemon-reload, systemctl start service --no-block && journalctl -fu service, ^C, repeat

I thought I'd reach for writing a Helm chart because Kustomize makes it really difficult to just copy and merge fields into multiple places ie env, envFrom, securityContext, etc. Big fucking mistake, I now have a kustomization which patches the application's container spec and then copies the right fields to init containers, cronjobs, etc

It's an imperative package manager for a fully declarative control plane. All of the pain of traditional package managers, which, when added to Helm's own special properties, will really leave you grasping for the co-codamol. helm-controller and flux can only sort of alleviate the agony

Helm sucks when you are just consuming charts other people maintain but oh god does Helm suck when you want to make something work #kubernetes

just booted up a new #cursed #kubernetes cluster
- fedora server, with k3s
- pointed to cri-o
- with kine pointed to oracle clown mysql

i don't think you can leave out GNOME's attitude to cross-platform cross-desktop compatibility, long documented. they continue to wage their wars on status icons, and server-side decorations, and middle-click paste. every wayland-protocols discussion becomes a furious war between KDE "we want our shit to work" vs GNOME "fuck you, we are the law"

i think what grinds people down about gnome is the attitude. "You won't need it" said in the same tone as Angelo Bruno. rewriting core components of the stack all the time. gnome heads believe that their software is perfect, and their users (and downstreams!) are defective.

red hat obviously think highly enough of it to ship it in its vanilla state as the only desktop environment for rhel workstation. ubuntu ships a load of extensions which had various states of breakage last time i tried. its a very odd state of affairs.

no one really knows who gnome shell is for. it looks like it would be great for a tablet, which it sort of is, at least after the triple buffering patch, but its developers argue otherwise. it could be the emacs of the linux desktop, but every update breaks every extension, often on purpose. its not easy to pick up for windows users, or for macos users. no one knows

RE: @4diejungs@social.treehouse.systems

i have decided to put my money where my mouth is, and to switch to gnome shell. of course this is bazzite gnome shell with its own load of extensions, i think the same ones as bluefin

underrated aspect of ARM single board computers is that the firmware is often configured with a text file, as opposed to a UEFI that needs a display to configure. i would like an N100 for a media server but it is just too difficult to leave alone without a display or another raspberry pi hooked up to it