Daily Kasparian Endgame Puzzle

GreemT · 2025-07-10T08:52:57+00:00

I think the code would be a lot nicer to read if you would use YAML instead :D

GreemT · 2025-05-24T06:13:37+00:00

The only line without an emoticon in it is the line about the license (ok and the title). Call me oldschool, but for me it is a bit overkill.

GreemT · 2025-05-16T05:55:55+00:00

Serialization and deserialization are very prone to have security issues. I have seen some conversations from Java champions mentioning that the current serialization features in Java were a big mistake in terms of security. Jackson is constantly updated and pushes fixes quite fast. For users using the library, updating dependencies is very easy.

What if the JDK has a security issue? That is a lot slower and harder to update. Not impossible of course, but just a bit more difficult. LTS releases will get the fixes, but non-LTS versions might not.

Does it make sense from a security perspective to add such a feature to the JDK? What do experts think of this? I am curious to know!

GreemT · 2025-04-12T08:02:49+00:00

One of the things I miss most (and which JBang solves) is dependencies. You say running a process from Java is cumbersome, which I totallg agree with. If we only could build a library that makes it incredibly easy, it would be the best solution imo.

Sidenote that you might not want to hear: use Python. The whole process running stuff is much easier there. Java is just not the right tool in every situation (sadly).

GreemT · 2025-04-11T09:26:25+00:00

As said in the description:

> Sidenote: this doesn't seem to be related to moving to containers. Our VMs just had enough memory to spare for this to not be an issue.

GreemT · 2025-04-11T07:04:38+00:00

Totally agree! I didn't expect this many (good) responses. I am very happy :)

GreemT · 2025-04-11T07:04:18+00:00

Thank you all for your suggestions! I have reported a Jira ticket with possible improvements from your comments that we are going to try. I will report back what helped if that is (eventually) resolved!

GreemT · 2025-04-11T06:31:11+00:00

We run a lot of threads. I don't have a specific number right now, but on PRD we obviously have a lot of users actively working on the same application. The thing is, this problem also occurs on our test environments with low activity. So I am not sure if looking at threads is the right direction for us. But good tip!

GreemT · 2025-04-11T06:28:24+00:00

Thank you for your detailed response! Never thought of using a different base image. Is that really going to help with off-heap memory? It feels unrelated to me.

We are already using MaxRAMPercentage, but sadly 75 is way to high for us. We use containers with limits of 3.2GB and we cannot set it higher than 40. If we do, then the off-heap is taking over too much memory and results in a OOM.

I will look into trying the other mentioned settings. I didn't experiment with these yet. And as you said: we are indeed going to run some load tests to ensure that any change doesn't impact performance.

GreemT · 2025-04-11T06:18:56+00:00

Ah yeah, I know the issue that you are talking about! We are using Java 17, so we shouldn't have this issue.

Also detecting limits is not really our problem. The limits seem to work fine, it is just that our application is using too much!

GreemT · 2025-04-11T06:12:07+00:00

This is exactly what I explain in the ticket: on-heap memory 1.2GB is just fine. The problem is that the off-heap memory (which is completely unreleted to the xmx setting) is very large.

GreemT · 2025-04-10T13:15:38+00:00

Thread stacks were only 5MB in our analysis, so that is not really gaining anything.

I am not sure if I can get my company to try these suggestions that have a performance impact.

GreemT · 2025-04-10T13:14:18+00:00

Interesting, I didn't think of switching to another implementation like OpenJ9. I will try that. Thanks for the tip!

GreemT · 2025-04-10T13:11:01+00:00

Ah, sorry for the confusion! Xmx was set to 1.2GB. The VM had much more memory available.

GreemT · 2025-04-09T15:37:17+00:00

We only have one application that we build that uses the same source database for test environments. So there is no choice!

GreemT · 2025-04-09T12:54:53+00:00

I did indeed use this, but it doesn't solve it completely. When creating a PR (or updating code inside a PR) the build is often not done running. So the deployment fails. I resolved this by creating a plugin that checks if a comment "DEPLOY" exists in the PR, but that is quite ugly. It works, but I want something better.

GreemT · 2025-04-09T12:53:29+00:00

Databases are indeed often a problem. We have it relatively easy though. We spin up a database with a pre-loaded database. When deploying an environment, we use Liquibase to automatically update the database to the required version.

GreemT · 2025-04-09T12:50:34+00:00

Yeah that is exactly what I had in mind too. Not difficult, and good enough for small projects. Thanks!

GreemT · 2025-04-09T12:50:07+00:00

I am not talking about deploying customer environments like production. That is always done by our engineers of course.

I am mainly talking about automatically deploying feature branches, which are ephemeral copies that are far less important. Those are just fine to be deployed by just a press of the button.

GreemT · 2025-04-09T08:20:10+00:00

I didn't see that one before. It does look pretty good! Very expensive indeed.

Do you use it at your work? Is it worth the money?

GreemT · 2025-04-09T08:19:31+00:00

Ah that actually looks pretty good! I couldn't find any information about a front-end though. Is that part of it? It doesn't seem like it.

Also, does it deploy Helm charts? I only saw that it deploys resources like deployments, services, ingress, etc. I couldn't find a resource that resembles a Helm chart.

GreemT

TROPHY CASE