• 0 Posts
  • 9 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle


  • So what, Japan just colonized most of Asia to spread zen vibes? Or, you know that time Ghengis Khan raped and pillaged his way all the way to Eastern Europe? Or, failing that the repeated wars between Egypt and the Hittites? Even the native Hawaiians fought wars between the islands prior to their colonization. Conquest, genocide and enslavement have been the human condition for all of history everywhere without exception.

    Preemptive edit: This doesn’t excuse any of it and we are finally, maybe barely moving past it, but the only reason it seems like this is a western phenomenon is because the most recently globally dominant nations are from there.




  • I’ve seen this before and I think it is worth adding some context too.

    Let’s start with, yea, it leads to absurd result like the clown show in uvalde where I wouldn’t trust that police force to rescue cats from trees.

    But… the other way you can’t have a right to a scarce resource (police protection). Police calls while not exactly random can’t be accurately predicted. It doesn’t make sense for a police force to be liable for failing to protect when they might literally not have the ability to protect. Or, through chance, there are no police officers that can get to the location in time.

    Instead, the point is to rely on the police wanting to actually do their job and have a legal doctrine accordingly. But in our culture it seems that perhaps that is not necessarily a warranted assumption anymore.


  • You need to me careful about benchmarking to find performance problems after the fact. You can get stuck in a local maxima where there is no particular cost center buts it’s all just slow.

    If performance specifically is a goal there should probably at least be a theory of how it will be achieved and then that can be refined with benchmarks and profiling.


  • I can’t remember exactly what all the pieces are. However, I believe its a combination of

    • cgroups: process isolation which is why you can see docker processes in ps/top/etc but you can’t for vms. I believe this is also what gets you the ability to run cross distro images since the isolation ensures the correct shared objects are loaded
    • network namespaces: how they handle generating the isolated network stack per process
    • some additional mount magic that I don’t know what its called.

    My understanding is that all of the neat properties of docker are actuall part of the kernel, docker (and podman and other container runtimes) are mostly just packing them together to achieve the desired properties of “containers”.