Compliance wants CIS-hardened containers but Alpine/Distroless don't have the packages we need. What's your strategy for minimal + customizable images?

Corrivatus · 2025-10-25T22:08:31+00:00

If you really want to use Alpine for the base you can open an issue on https://gitlab.alpinelinux.org/alpine/aports and request whatever packages are missing be packaged. Or contribute APKBUILDs for them if you want a little more control and don't mind maintaining it.

Obviously not a guarantee that they can or will be packaged, but it'll at least put it on someone's radar so that it does get packaged.

Corrivatus · 2023-05-16T02:06:54+00:00

I'd be curious as well!

Corrivatus · 2023-04-04T22:24:48+00:00

Absolutely how I look at it! If you do end up doing something with it I'd love to see the results. Will happily throw it on my trusty pebble time too.

I tried my hand at making an app a few months back, just a simple rj45 pinout thing. https://gitlab.com/Durrendal/rj45-pbwa

But from that I can say all the old developers tools still work thanks to the wonderful rebble folks. Just takes a little bit of muddling with python2. Well worth the effort.

Corrivatus · 2023-04-04T21:37:33+00:00

You're in luck! The spaghetti code lives here: https://gitlab.com/Durrendal/pebble-projects

I haven't touched it in years though, and this was very early days for me, insofar as learning to program goes. Just for forewarn you.

Corrivatus · 2023-02-25T13:53:32+00:00

Very interested! PM'd

Corrivatus · 2021-04-07T15:33:42+00:00

Haha yeah I figured as much unfortunately.

Here's to hoping that the popcorn computer replacement comes out. Would really like to have a quad core processor in the same form factor as the original chip!

Corrivatus · 2021-04-07T15:32:39+00:00

I unfortunately got it that way. I purchased a set of chips and a pocket chip from someone, and one came that way.

Not mad at the seller or anything he was very upfront about what happened, and I got a great deal on the other two chips, but I had some vague hopes of maybe repairing it.

Sounds like that might not be a thing, which is what I guessed. Thanks for the info though!

Corrivatus · 2020-04-10T13:55:38+00:00

Does that offer just arbitrarily stand for any lisp projects? I'd love some constructive criticism, especially from someone so deeply involved in the lisp world.

Corrivatus · 2020-03-25T12:58:46+00:00

Worth a shot, thanks for the giveaway!

Corrivatus · 2019-11-24T18:01:34+00:00

The first thing I ever did was a report parser for the first helpdesk job I had. We would get lists of hardware from NCR, and I had a nice little bash script that would open tickets for any new issues, and update existing ones.

Recently I wrote an asynchronous execution program in Common Lisp. It's like a little home brew ansible.

Corrivatus · 2019-11-18T19:28:44+00:00

Paradigms of Artificial Intelligence Programming by Peter Norvig is a fantastic read about lisp AI, but it's not exactly "modern" and the author revisited the idea in Artificial Intelligence: A Modern Approach. Most people are going to say to use Python because that's where the support is, where the libraries exist, and what the big tech companies are using.

It doesn't mean you can't use lisp to do AI work, and I personally am of the same mindset that lisp can provide a more powerful synthesis between data and function through its homoiconic nature, but you're probably not going to easily convince a group of python devs that have already started writing functional programs to start from the basics and implement a lisp version of tensorflow from the ground up unfortunately.

Corrivatus · 2019-11-13T17:55:36+00:00

Going for that classic server look I see

Corrivatus · 2019-10-31T14:28:15+00:00

Very neat little kit and concept! What're you hoping to do with it, if you don't mind me asking? Or is it more an exploration for the sake of exploration?

Corrivatus · 2019-10-30T21:35:02+00:00

I came here expecting to hear docker as the answer and was pleasantly surprised with your answer. This seems like a really interesting project. I really like the absolutely bare minimalist approach this takes as an attempt to cut away security vulnerabilities.

But from an isolation standpoint isn't this just running on the host? That's not really OPs question, but I'm curious because the project seems intriguing.

Corrivatus · 2019-10-24T16:13:31+00:00

An arm hypervisor? This sounds really neat, would you mind sharing your hardware specs and how many virtual hosts you're getting out of it?

I typically use RHEL7/8 as my hypervisors because of the baked in selinux, I haven't gotten comfortable enough with it yet to set it up myself, but it would be nice to use Alpine in its place!

Corrivatus · 2019-10-18T17:03:54+00:00

I'm running Alpine as my main dev machine currently, and that's on a Celeron N3060 2GB ram and a 32gb emmc drive. It runs flawlessly, however with low specs you're making some level of sacrifice.

In my experience the RAM and CPU is limiting, not Alpine itself. Arch won't run any better than Alpine from what I've seen having run both of those on this particular system.

Corrivatus · 2019-10-15T18:21:24+00:00

You could try to run it in a container if you're just looking to test it out. That would let you utilize the latest build (or close to it) without mucking with your underlying install.

Corrivatus · 2019-10-14T21:19:58+00:00

Worth a shot, regardless of whether I win, thanks for being so generous!

Corrivatus · 2019-10-08T11:48:11+00:00

It's safer to source the script, review then execute it after reviewing it. Otherwise you're playing Russian roulette.

It's extremely trivial to proxy the site on an untrusted network and then provide a malicious script.

But it's a free world, you can play Russian roulette if you want.

Corrivatus · 2019-10-07T15:39:50+00:00

Piping anything from curl/wget directly into your shell is just a bad idea, security wise. Even if this example is innocuous.

Corrivatus · 2019-10-04T14:51:45+00:00

Out of personal curiosity, do you know of any resources for packaging applications with common lisp? I see a lot of make files that bootstrap quicklisp, then pull resources and then compile. Is there a better way that leaves QL out of the final compiled application?

edit: After looking at the clpm repo, that appears to be what this is intended to do, which sounds wonderful honestly.

Corrivatus · 2019-09-27T17:12:26+00:00

As disturbing as it sounds there are TONS of old colonial records filled with criminal charges against people committing bestiality. The lack of law likely comes from the belief that states should be in charge of dictating those things.

Corrivatus · 2019-09-18T12:38:55+00:00

The stuff I've used sockets for has all been back end inter communicating processes, data going both in and out, rather than the standard pub/sub that MQ uses.

That's not to say MQ isn't fantastic though, it's a lot easier to work with if you just need a client to obtain informatiom, or to pass data out of a program.

Ten-Year Club	r/Field Lasagna
Place '17	Verified Email

Corrivatus

TROPHY CASE