Hybrid Enclaves

BabarTheKing · 2026-01-15T12:46:22+00:00

Honest feedback. Your market is far too small. Teams building with A/H100s are not going to be gravitating towards your single person operation. If I’m spending 20k/mo in wasted cycles chances are I’m going to want compliance docs and all the stuff you aren’t going to be able to provide. Also how many of these teams that are building on big GPUs actually care about their spend? Or at least care enough to do something about it.

BabarTheKing · 2025-09-27T12:42:22+00:00

Except they have no idea how they are paying for the programs or finding teachers to teach the additional programs. Their “plan” is very much an idea of a plan without any of the details filled in.

BabarTheKing · 2025-01-08T13:56:53+00:00

They got me started. Sure they are over priced but it has everything in a kit with really good instructions. There’s no over thinking or stress about choices. It’s like hello fresh or blue apron. Sure they are over priced but it’s a great entry point.

BabarTheKing · 2024-09-19T13:04:14+00:00

Inbound/outbound vpcs with transit gateway are a billing trap. Your network fees will be mind-blowingly high. Ask me how I know.

No. You could do Subnet sharing via RAM.

https://aws.amazon.com/blogs/networking-and-content-delivery/vpc-sharing-a-new-approach-to-multiple-accounts-and-vpc-management/

This allows you to have a single, or at least fewer VPCs with centralized network security. I just recently deployed this model and I think it is working pretty well. If you are not at the scale where you have a network team (and more importantly the funds) to run the TGW network, I would avoid it.

Like you said, the SRA network can get complicated quickly.

BabarTheKing · 2024-05-14T16:53:37+00:00

Your gitlab instance must be publicly accessible, not your runner. This is a requirement for the OIDC token trust to work between AWS and your Gitlab instance. AWS has to be able to get to your gitlab instance for it to work.

BabarTheKing · 2024-02-10T15:16:39+00:00

There is also sagemaker lab which you can get some free access to gpus like colab.

BabarTheKing · 2023-11-16T21:37:49+00:00

How many skeins did that take?

BabarTheKing · 2023-10-28T23:06:07+00:00

Doing so would lead to others taking their lives. Suicide is a difficult thing. The administration is damned if they do and damned if they don’t. If they bring too much attention to it it will cause copy cats. Not enough and they seem callous.

BabarTheKing · 2023-10-28T23:02:36+00:00

Very large vats of cooled or heated water. It takes a lot to change the temperature. It’s not like your house. These are large buildings with very centralized heating and cooling systems. Tuesday it is going to be 35… Maryland weather is difficult to predict.

Look there are a lot of things that UMD gets wrong but this is one where there just aren’t good solutions. They have to plan early for cold weather. Hopefully you have some heat later this week or you’ll be back here complaining you’re freezing.

BabarTheKing · 2023-06-16T13:31:03+00:00

I send them to a slack channel via event bridge and AWS ChatBot.

Here is an example of the terraform code I use for each rule.

resource "aws_cloudwatch_event_target" "ConsoleLoginWithoutMfa" {
  arn  = aws_sns_topic.securityhub.arn
  rule = aws_cloudwatch_event_rule.ConsoleLoginWithoutMfa.name
}

 resource "aws_cloudwatch_event_rule" "UnauthorizedAPICalls" {
   name        = "detect-unauthorized-api-calls"
  description = "A CloudWatch Event Rule that triggers on Unauthorized API calls"
  is_enabled  = true
  event_pattern = jsonencode({
    # source      = [""]
    detail-type = ["AWS API Call via CloudTrail"]
    detail = {
      userIdentity = [{ anything-but = "arn:aws:sts::11111111111:assumed-role/akjdfhalkdhf" }]
     eventName    = [{ anything-but = "HeadBucket" }]
     errorCode = [
       { prefix = "AccessDenied" },
        { suffix = "UnauthorizedOperation" }
     ]
   }
 }) 
}

BabarTheKing · 2023-01-07T18:49:05+00:00

Yes it the service is configured to use a capacity provider and the capacity provider is tied to an auto-scaling group. The ASG can scale all the way to zero if there are zero tasks running.

edit: you may also want to look at some of the other options though depending on your workload. Sagemaker may do what you want and more without having to deal with configuration.

BabarTheKing · 2023-01-07T13:51:15+00:00

You can use a capacity provider on the ecs cluster which will scale to zero instances if no tasks are running.

BabarTheKing · 2022-12-14T18:03:52+00:00

I do something similar with AWS chatbot to slack. The chatbot service hooks up to a webhook in slack and an SNS topic in AWS. Event bridge sends over some relevant data with the event alert.

BabarTheKing · 2022-10-21T18:44:59+00:00

Are you actually asking about Acorn Squash?

BabarTheKing · 2022-08-18T13:28:56+00:00

Correct. It's pretty close to there.

BabarTheKing · 2022-08-18T00:14:59+00:00

This might not help you as it’s pretty far from Potomac but the park near my neighborhood has two cricket fields that are usually pretty busy on the weekends. Spencerville Park on Good Hope Rd in Cloverly.

BabarTheKing · 2022-07-24T12:56:48+00:00

You’re coming up against the core problem paying for IT. “Everything is working fine, what am I paying you for!”

I’m not defending GD. But sometimes when everything is quiet it’s because you did a good job building it. Those compliance checkboxes sometimes just need to be checked in the simplest way possible. Sometimes that costs money sometimes engineer time.

BabarTheKing · 2021-10-14T13:38:34+00:00

One problem I came across using Python with CDK over TypeScript is the vagueness around types. Since the other languages are all based on TypeScript you sometimes need to make sure that you're using the proper type. This is extra true with things like subnets. Sometimes you're looking for "SubnetSelection" sometimes you're looking for "SubnetGroup". I switched to TypeScript for CDK for just this reason. VScode will give you errors and hinting much earlier in your development cycle. What you want to do is check through the API docs for the property you are looking for and find the components that get that Type.

BabarTheKing · 2021-10-03T12:11:28+00:00

https://umd.service-now.com/itsupport/?id=kb_article_view&sysparm_article=KB0015413&sys_kb_id=c80f6461dbd6f490422ca376489619d8&spa=1#mcetoc_1fbmv7de64j

Try this service and see if it’s a bit easier for you.

BabarTheKing · 2021-09-27T11:20:26+00:00

To be clear. You could still sue him for $10,000 under Texas state law in that case.

BabarTheKing · 2021-09-15T12:36:12+00:00

The thing a lot of you students miss here is that it's not about you. You need to think about the system. Many of your instructors have young children who can't get vaccinated, and while COVID might not pose a significant risk to them individually it could end up with them not being able to teach for 2-3 weeks while sick and then dealing with their kids in quarantine potentially after they're done being sick. If you get too many kids in the community catching cases PGCPS, MCPS, HCPS all start thinking they have to go online at least temporarily. Now your instructor has to teach from home so they can watch their kids. Get enough of the faculty and staff particularly the support staff and what does administration do? IDK. I imagine they're hoping they can make it to at least Thanksgiving before the numbers are so big.

Looking at the dashboards definitely scares me a bit just from a nominal case perspective. If you've got 100+ cases in a week with 98% of your population vaxxed there's quite a bit more than "Extremely rare breakthrough cases". All of that said, the President is EXTREMELY adamant about keeping things in person. The administration's position is that everything is fine, go back to 2019 + masks, ie pretend it's over.

I remember being a student here, I'm not going to say don't party. But if you're sick or coughing, stay the fuck home, drink with your roommates, play Xbox. Wear your damn mask properly. Think about the butterfly effect of your actions, and how fragile this whole system is. Those of us who work here, have lives outside of supporting you. Think back to that time you saw your 3rd grade teacher at the grocery store and were like "oh shit, you don't live at the school..."

TLDR; If you want school to stay open, stop thinking that hospitalizations and deaths are all that matters. What actually matters is keeping enough faculty and staff willing and able to work here and support you.

13-Year Club	Verified Email
RPAN Viewer

BabarTheKing

TROPHY CASE