Uli @ Uli @sopuli.xyz

Posts

5

Comments

270

Joined

2 yr. ago

Thanks for the info. When I searched MASD, it told me instead about MAD, so it's good to know how they're differentiated.

This whole idea comes from working in a shop where most of their DevSecOps practices were fantastic, but we were maintaining fleets of Helm charts (picture the same Helm override sent to lots of different places with slightly different configuration). The unique values for each deployment were buried "somewhere" in all of these very lengthy values.yaml override files. Basically had to did into thousands of lines of code whenever you didn't know off-hand how a deployment was configured.

I think when you're in the thick of a job, people tend to just do what gets the job done, even if it means you're going to have to do it again in two weeks. We want to automate, but it becomes a battle between custom-fitting and generalization. With the tradeoff being that generalization takes a lot of time and effort to do correctly.

So, I think plenty of places are "kind of" at this level where they might use CUE to generalize but tend to modify the CUE for each use case individually. But many DevOps teams I suspect aren't even using CUE, they're still modifying raw yaml. I think of yaml like plumbing. It's very important, but best not exposed for manual modification unless necessary. Mostly I just see CUE used to construct and deliver Helm/kubernetes on the cluster, in tools like KubeVela and Radius. This is great for overriding complex Helm manifests with a simple Application .yaml, but the missing niche I'm trying to fill is a tool that provides the connections between different tools and constrains the overall structure of a DevSecOps stack.

I'd imagine any company with a team who has solved this problem is keeping it proprietary since it represents a pretty big advantage at the moment. But I think it's just as likely that a project like this requires such a heavy lift before seeing any gain that most businesses simply aren't focusing on it.

I've never heard of this before, but you're right that it sounds very much like what I'm doing. Thank you! Definitely going to research this topic thoroughly now to make sure I'm not reinventing the wheel.

Based on the sections in that link, I wondered if the MASD project was more geared toward the software dev side or devops. I asked Google and got this AI response:

"MAD" (Modern Application Development) services, often used in the context of software development, encompass a broader approach that includes DevOps principles and tools, focusing on rapid innovation and cloud-native architectures, rather than solely on systems development.

So (if accurate), it sounds like all the modernized automation of CI/CD, IaC, and GitOps that I know and love are already engaging in MAD philosophy. And what I'm doing is really just providing the last puzzle piece to fully automate stack architecting. I'm guessing the reason it doesn't already exist is because a lot of the open source tools I'm relying on to do the heavy lifting inside kubernetes are themselves relatively new. So, hopefully this all means I'm not wasting my time lol

Yeah, I've been using it heavily. While someone without technical knowledge will surely allow AI to build a highly insecure app, people with more technological knowledge are going to propel things to a level where the less tech savvy will have fewer and fewer pitfalls to fall into.

For the past two months, I've been leveraging AI to build a CUE system that takes a user desire (e.g. "i want to deploy a system with an app that uses a database and a message queue" expressed as a short json) and converts a simple configuration file that unpacks into all the kubernetes manifests required to deploy the system they want to deploy.

I'm trying to be fully shift-left about it. So, even if the user's configuration is as simple as my example, it should still use CUE templating to construct the files needed for a full DevSecOps stack - Ingress Controller, KEDA, some kind of logging such as ELK stack, vulnerability scanners, policy agents, etc. The idea is the every stack should at all times be created in a secure state. And extra CUE transformations ensure that you can split the deployment destinations in any type of way, local/onprem, any cloud provider, or any combination thereof.

The idea is that if I need to swap out a component, I just change one override in the config and the incoming component already knows how to connect to everything and do what the previous component was doing because I've already abstracted the component's expected manifest fields using CUE. So, I'd be able to do something like changing my deployment from one cloud to another with a click of a button. Or build up a whole new fully secure stack for a custom purpose within a few minutes.

The idea is I could use this system to launch my own social media app, since I've been planning the ideal UX for many years. But whether or not that pans out, I can take my CUE system and put a web interface over it to turn it into a mostly automated PaaS. I figure I could undercut most PaaS companies and charge just a few percentage points above cost (using OpenCost to track the expenses). If we get to the point where we have a ton of novices creating apps with AI, I might be in a lucrative position if I have a PaaS that can quickly scale and provide automated secure back ends.

Of course, I intend on open sourcing the CUE once it's developed enough to get things off the ground. I'd really love to make money from my creative ideas on a socialized media app that I create, am less excited about gatekeeping this kind of advancement.

Interested to know if anyone has done this type of project in the past. Definitely wouldn't have been able to move at nearly this speed without AI.

Ah, yes, I've been hearing a lot about Facebook selling your Data.

Oh my god, how embarrassing.

But that's cherry picking!

Let me see if I can predict how this will go:

• Trump spends a week saying that the education department is the worst it's ever been and that Biden was going to make all the school lunches trans so we have to stop it
• He says only he understands how to fix education and make it less trans and he's not going to stop until no lunch is trans
• Golf break
• DOGE deletes all studies on trans fats
• Elon tells everyone at DOE they are fired and for every minute they stay in the building one article of their clothing will be set on fire
• Trump makes up some lie like that Canada is training geese to illegally cross the border under the guise of migration
• The news media focuses on the second thing
• Golf break
• Some judge says no, you're not allowed do just get rid of Department of Education
• Trump makes a thinly veiled threat against that judge's life
• Golf break
• Chief Justice John Roberts crosses out what the district judge said and covers it with a sticker that says "Great Job"
• Trump makes up some lie like a country-wide epidemic of Dominican immigrants putting their butts on drinking fountains
• The news media focuses on the second thing
• Golf break
• Donald Trump decides to try putting his butt on a drinking fountain

I don't see any world where all of this does not happen exactly as written.

My perspective is only mine, but I've had mixed results on this.

I'm in my mid-thirties and I have not seen a doctor as an adult. I have been to urgent care twice, once in my early twenties for pneumonia and once a couple years ago for a fungal ear infection.

I have a few minor ailments, some curable and some not, which I would love to see a doctor for. But I'm always afraid to open that door. Due to my ADHD, I tend to get in a cycle where I'll find a decent job, burn out due to poor sleep hygiene and the pressure of wanting to do well, and then spend months working on personal projects and getting good sleep until I have to find work again.

I have this fear that I'll find a doctor and get prescribed for something that I'm told I need and then become reliant on that medicine and then leave my job and not have an affordable way to get it. I'm mildly overweight, but at my peak fatness I was worried I was pre-diabetic. And I avoided seeing a doctor still because I figured I'd like to focus on diet and exercise to address it without medicine, because I don't want to get prescribed anything. I get concerned hearing news stories about doctors getting pharmaceutical kickbacks.

I can't stay young forever. My problems will worsen without adequate care. My goal is to make enough money from creating software independently that I don't have to worry about whether I have a job or not when I schedule a doctor's visit. To know I'll be able to afford any medication either way. I feel like I'm getting close to realistically achieving this but it's not necessarily a realistic goal for the average person with ADHD to have.

In the absence of healthcare, I have smoked and consumed a lot of cannabis. This self-medication has been the source of some of my ailments. There is a real possibility that if I continue to smoke this way into old age, I will develop some form of emphysema. I do not want to be dependent on this drug forever.

That said, the effect it has on my ADHD is mostly positive. I've developed a tolerance such that I'm not as affected by most of the usual negative side effects - impaired memory, lowered cognitive function, etc, though there is still some effect. It leads me to disassociate more for sure. But that can also be good practice for maintaining focus when I'm sober. I'm a lot better at that than I used to be. Maybe mainly due to maturity and experience. But if properly channeled, the THC-fueled ADHD tangents can lead to productive results. In my experience.

People forget that cannabis has a narcotic component. When I consume edibles, it makes me sleepy. But something about the metabolic pathway of smoking gives cannabis smoke or vapor a stimulant effect on me. And it motivates me to enjoy the thing I'm doing, whatever that is. It's very easy to get lost in the enjoyment of watching movies or playing video games or making comments on Lemmy (oops). But when I'm doing work while high, I get a certain enjoyment in the minutiae of the task and trying to adequately solve whatever piece of the puzzle is keeping my work from advancing. Where I might not have had the motivation to work at all before, cannabis can make it a fun activity. Again, it's how it works for me.

But it's expensive, even with how cheap it's become. When you look at the long term, who knows if I would have saved money with pharmaceuticals instead? And it hurts my lungs, makes me cough loudly. I'm also dependent on it. I've needed to stop at times for jobs, or because I was trying to quit. And I notice after a week or two, I'm more irritable, more lethargic, with increased depression and suicidal ideation. It is addictive.

But so are the stimulants people with ADHD take. I've dated people on these meds and seen the difference in energy of on versus off. I wonder if in some ways I'm better of from having not used my access to medical care and instead I developed coping mechanisms that allow me to exist in the world. Or just grew out of some of my issues to some degree. But even if THC has helped me with the introspective development I needed to reach this point, I wonder if I would now be better off without it. And maybe give the pharmaceuticals a shot, tentatively. I'm unsure.

I don't think the guy promoting cannabis in this thread is doing so with very much tact, and maybe the downvotes are useful to deliver that point. But given my history I hesitate to entirely dismiss the idea that cannabis can stand in for a stimulant in certain scenarios. We should be realistic about the risks and tradeoffs, but I felt the need to provide my somewhat biased viewpoint. Not trying to persuade anyone, just want my experience to live here as another point of data. In case anyone else has experienced something similar.

EfFiCiEnCy

Yeah, I have a lot of outdated books too.

Edit: I guess people don't enjoy book puns?

Oh my. Lots to dig into here.

Let's start with breast size. No, breasts don't need to be big to produce adequate milk. Many women with small breasts have breast tissue that is dense with gland structure, meaning they have plenty of milk production capabilities.

About 1 - 4% of women do struggle to provide enough milk for their offspring, but this is typically a hormonal issue that has less to do with breast size and more to do with ovaries. As long as the mother's breasts increase by about a cup size during pregnancy, it is expected they will have adequate milk production.

Here's a source on the topic:

https://www.didymos.de/en/blog/small-breasts-no-milk/?srsltid=AfmBOoqepv0oQNz0TGIpPESnwNiIT2-eVP7aY7a_GHCI2Tn29O19FVMD

Yes, wet nurses used to be prevalent. And yes, they used to be hired when mothers could not produce enough milk on their own (that 1 - 4%). But childbirth used to be a lot more dangerous, so a major role of wet nurses was to provide for the infant when the mother died during childbirth.

But the primary use of wet nurses was by the upper class. Not because the mother required help producing milk but because such activities were seen as lower class. They would leave it to the wet nurse to feed the baby which also allowed them to stop lactating sooner and return to a fertile state where they could produce more children sooner.

It's also interesting you bring up dairy cows because they are a prime counter-example to your point. Over many generations, we bred and selected for dairy cows with large udders for increased milk production. They didn't produce such huge volumes of milk until we started breeding them to do so. So, they are a good example showing that animals in nature do not need large breasts to produce an adequate volume of milk, but breeding for larger breasts can increase the milk production to excessive levels. And cause back problems.

Haven't seen that, but now I want to.

This might be pseudoscience I got taught 20 years ago, but I have been under the impression that human evolution of breasts as a secondary sexual characteristic has to do with the shift to becoming bipedal. Like a lot of animals, early hominids would see the rear end of a fellow hominid and know this as a trigger for copulation. But when homo erectus started standing upright, butts weren't so universally erotic anymore. They had a whole back and head above them now. Breasts didn't need to be very large to fill their function, but an increase in size gave them a curvy appearance similar to a set of butt cheeks. And early humans were like, yeah, I think that's right, and selected for increased (or at least variable) breast size.

Yeah, if I were you I'd cut my losses and try to find another place. If you're lucky enough to know this place has bugs while very little of your stuff has been exposed, I'd get out before the problem has taken hold in your life.

That said, there are ways to deal with infestations. Likely if it's been a problem dating back years, there's some place they retreat to that kick starts the population each time they're exterminated. But in typical homes, steam treatments from professionals can eradicate the pests. Mark Rober made a pretty good video pushing back on some of the stigma:

https://www.youtube.com/watch?v=2JAOTJxYqh8

Good luck to you. I hope you end up in a good place after all this. Sucks to get this close to a stable living space only to be thwarted by invertebrates.

MAGA: We need to protect the nuclear family.

Trump: Yes, the nuclear family. What a big, beautiful family. No one knows nuclear like me. My uncle -

Yeah, from that year Shawn rapidly changed appearance and no one seemed to notice. That's just like Shawn.

I think each title/post of the same content should be treated as its own top-level object in the comments section, so collapsing everything at the top level would show you all the posts and reposts from various communities.

On client side, you should be able to merge all the posts, to sort all top level comments together. But if you go to make a top level comment, you'll need to be replying to a specific post from a specific community (selectable, but defaults to the title you were shown from outside the post).

From outside the post, I think it would be cool to be able to browse the various posts of the same content from different communities, seeing their titles, the name of the community/instance, the number of comments.

Just my initial thoughts. Mainly, I just think it's cool that we're talking about this issue at all because once we solve this kind of problem in all its forms and iterations, we could see some really cool decentralized communities start to coalesce. IMO, the next big step after this would be building systems a user could use to find instances and communities they're not yet aware of.

Same here. I've been building a bootstrap script, and each time I test it, it tears down the whole cluster and starts from scratch, pulling all of the images again. Every time I hit the Docker pull limit after 10 - 12 hours of work, I treat that as my "that's enough work for today" signal. I'm going to need to set up a caching system ASAP or the hours I work on this project are about to suddenly get a lot shorter.

Personally, I downvoted because lately I've been devoting almost all of my energy toward trying to develop software we can use to build a true democracy. That's how I keep myself sane and believe I'm contributing to solutions. Others have their own ways.

And while I'm waiting for scripts to run, I do make the occasional political comment in places like this. But that's a separate thing just to connect with people and unwind. I can't speak for the others, but I was downvoting the assumption that just because someone shows outrage at an outrageous situation, that necessarily means they're doing nothing to try to fix it. Those things are not mutually exclusive.

Yeah, I thought he was out of control, but I wasn't aware he had been slammed.