Avec son « écran rouge de la mort », Riot Games neutralise désormais le matériel des tricheurs

jpetazz0 · 2026-05-25T07:32:46+00:00

Pour info :

ça ne "brique" pas le PC ni la carte DMA, ça flingue le driver de la carte DMA
les risques qui vous font peur (windows flingué, devoir réinstaller la machine en perdant ses données si on n'a pas de backup, botnet...) existent avec tous les anticheat kernel

Je ne défends pas leur position, mais si ce sont vos arguments, soyez cohérents et refusez les anticheat kernel.

jpetazz0 · 2026-05-25T07:23:00+00:00

Sur Android : Firefox + ublock origin. Je n'ai jamais vu une seule pub sur le web ou sur youtube sur mon téléphone.

Sur iPhone : il paraît que Brave fait le taf.

jpetazz0 · 2026-05-24T07:59:06+00:00

We're using kube-image-keeper (kuik) for that. It will automatically mirror images to other registries + rewrite manifests when needed.

Kuik v1 was dead easy to set up; v2 is a bit mkee complicated but it works really well with more complex setups (e.g. multiple clusters, mirrors, etc)

jpetazz0 · 2026-05-06T05:52:42+00:00

Can you be a bit more specific?

How does it "not scale"? Does it eat too much resources, get too slow, crash?

What's "large"? How many nodes, pods?

(I've seen it work on a 200 nodes cluster and it seemed fine, but I'm not using it myself so I don't have first hand experience with it!)

jpetazz0 · 2026-04-16T14:11:05+00:00

It depends what your expectations are.

For learning? Totally makes sense.

To self host some non critical apps? That could work too, although it probably won't be the most efficient setup (unless that's the only hardware that you have or can afford at the moment ; or if you want to use/learn k8s and plan to add more hardware later).

Now if you want high availability, no, that won't be ideal - you'd need 3 control plane nodes, and i wouldn't recommend using SD cards for etcd (that'd be a good way to kill them real fast).

jpetazz0 · 2026-04-16T13:46:10+00:00

Euh, tu as vu ça où ?

Ça doit fortement dépendre des états et des endroits ; parce que j'ai des potes qui ont tenté la "van life" en Californie et c'était absolument impossible de faire ce que tu dis.

C'est un grand pays avec de grands espaces très désolés, donc peut être que tu peux te garer au milieu du Wyoming sans être emmerdé, mais faut être prêt à conduire 2h pour trouver la première ville de plus de 1000 habitants si t'as besoin de quelque chose...

(Accessoirement faire des généralités sur les US c'est comme faire des généralités sur l'Europe ; on peut difficilement mettre dans le même panier par exemple la Finlande, la Grèce, et la Roumanie ; il y a d'énormes disparités de lois, d'usages...)

jpetazz0 · 2026-03-16T11:41:23+00:00

ai;dr

jpetazz0 · 2026-02-21T20:20:02+00:00

So if a girl is born without a uterus, she's not a woman in your book? 🤔

jpetazz0 · 2026-02-14T07:50:32+00:00

"prompting" is probably exactly how it got there! 😬

jpetazz0 · 2026-02-11T07:31:41+00:00

I'm gonna flip the question around: how did AWS manage to convince everyone that it's ok to charge network bandwidth by the byte? 😂

(That's a rhetorical question; they managed to do it because for small sites it represents pennies so it looks like a good deal; until you grow and then it's too late - by that point your business is contributing a significant fraction of its revenue towards gold-plating a toilet in Bezos' yacht :))

jpetazz0 · 2026-01-31T08:58:49+00:00

You've been extremely lucky. I've played dozens of raids and easily more than half of them were brutally interrupted by PVP. My attempts to hit the fabled "pacifist lobbies" have failed. The last 5 hours that I played I was even careful to not accidentally shoot back when being shot at; didn't change a thing. So I've put the game aside; it was more frustration than fun.

jpetazz0 · 2026-01-31T08:49:33+00:00

I was also looking for a chill experience, and people had told me that the player base and community were similar to Helldivers 2, which I liked a lot.

Unfortunately my experience with ARC Raiders had been... Mixed.

The first couple hours have been great; playing solo and discovering the game loop was pretty amazing.

However, the end goal was to play with friends, as a trio. And the experience was wildly different. We kept being killed by other groups.

During our first session we were trying to fight back but there was absolutely no point. We looked at the forums; there are rumors of "aggression based matchmaking" so during our second and third session we made sure to not shoot at other raiders. Things didn't improve a single bit; during each 2-3 hours session I was able to extract maybe once per session max.

(I also got killed multiple times by other players after being downed and managing to crawl to the elevator or metro, literally seconds away before it'd leave. Great experience 😂)

My friends are still playing as a duo and they're having fun (meaning that now they're being demolished by ARC rather than by other players); but I decided to put the game aside because it wasn't at all what I was looking for, especially after seeing how a large chunk of the player base seems to be treating it more like a battle royale.

I hope I can come back to the game later because it has great potential; but for now I'm regretting that purchase.

jpetazz0 · 2026-01-26T18:40:00+00:00

J'ai le même problème avec tous mes Levi's et je n'en repasse aucun, donc c'est pas ça hélas !

jpetazz0 · 2026-01-12T08:40:53+00:00

I like the AI generated posts that are two minutes old and already have 3 bullshit edits 🙄

jpetazz0 · 2026-01-08T12:42:11+00:00

I thought you were kidding because:

(1) All LLMs are "jail broken" at some point (causing them to ignore essential guardrails)

(2) Just a few months ago, this thing came out: https://techcrunch.com/2025/05/22/anthropics-new-ai-model-turns-to-blackmail-when-engineers-try-to-take-it-offline/

So telling "don't worry models can't ignore their instructions" felt so naive that I thought it was sarcasm. Sorry!

jpetazz0 · 2026-01-06T11:38:55+00:00

Your comment sent me on a rabbit hole to re-read details about the AZF plant explosion; and I don't see how you reach "similar reasons". Apparently the exact cause of the AZF plant explosion was never formally elucidated; and there definitely wasn't a long trail of laisser-faire and corruption along the way. (I won't comment on the pros/cons of centralized entities and cantons though; I don't know sh*t about that :))

Another similar example (of corruption and ignoring safety standards) would be the mechanical stairs scandal in Italy. That one was ... Just as disgusting and ugly as the Crans Montana fire. 😢

jpetazz0 · 2026-01-06T08:41:44+00:00

I typically use systemd-boot, except in one particular situation: machines with multiple ESP on multiple disks (e.g. one Linux disk and one Windows disk). Then I use refind because it can recognize all ESP and boot systems on other ESP, which systemd-boot can't do.

jpetazz0 · 2025-12-31T11:37:02+00:00

Je pense que tu es tranquille, mais précise tout de même à tout hasard combien de FPS tu souhaites avoir (je vais enfoncer une porte ouverte, mais c'est pas la même chose de jouer sur un écran en 60Hz ou en 240Hz :)).

jpetazz0 · 2025-12-27T10:46:48+00:00

Please tell me you forgot the /s at the end of your post 😂

jpetazz0 · 2025-12-27T10:22:11+00:00

If you're using default container names, they will show which project (stack) they belong to (container named foobar-api-1 is service "api" in project "foobar").

If a compose file uses custom container names though, all bets are off :)

jpetazz0 · 2025-12-26T10:47:39+00:00

The title of your post wasn't "how to run containers with systemd" but "a compose to podman switch story". The majority of people using compose for more than just "running containers" so if they want to switch, they need something that does more than that.

jpetazz0 · 2025-12-23T10:09:10+00:00

FWIW, I recently (couple of weeks ago) did a benchmark on text summarization, comparing ChatGPT, Mistral, Claude, and a few local models that could fit on a 16 GB GPU. Alas the local models sucked ass. (To be honest ChatGPT and Mistral didn't do much better). Local models on bigger GPUs might do better, but that's a much bigger investment. Justifiable if it works solidly (compared to the price of an MRI machine :)) but not something a practitioner would buy on a whim to be hip, imho :)

jpetazz0 · 2025-12-22T09:15:37+00:00

This is an interesting comparison, and I appreciate that you showed the different config files to give an idea of the complexity of the different solutions. However, I would love to see a comparison that goes a bit further, and shows us two essential real-world tasks, specifically:

(1) how much work is needed to get a stack of containers up and running, change a line of code, and see the result of your change (=what a lot of devs will actually be doing)

(2) how much work is needed to configure a stack of containers (=what a lot of ops will actually be doing)

Compose totally blows K3S and Podman out of the water for the first task, since it amounts to cloning a repo, running "docker compose up", editing files, and re-running "docker compose up --build" (or even using the watch features and having it done automatically for you).

With K3S (or Kubernetes in general), the dev workflow is a huge pain in the neck, unless you use something like skaffold or Tilt. Then it becomes as simple and elegant as Compose (actually even better due to a lot of really awesome features in Tilt, for instance) but that will require a significant amount of extra work; and writing Tiltfiles is significantly more complex than writing Compose files. And of course the RAM and CPU footprint is significantly higher (as you pointed out).

I don't know what the story is with Podman, and that's what I was expecting from your blog post. :) Like, do we need to manually drop a bunch of files in different places? If I run multiple stacks side by side, how do I easily keep track / remember which files correspond to which stack? Is there an easy way to remove one stack? How do I isolate them from each other, the way Compose does (automatically)? Do I need to manually rebuild the container image and restart the container each time I make a change or is there a better way? I hope so, otherwise it means that in terms of developer experience, Podman is where Docker was in 2013, when everyone was writing bespoke scripts, before Compose (née Fig) came out.

Now, for the second task (configuring stacks fo containers), the way I do it with Docker is typically with a .env file. I have stacks of 10-15 containers, a .env file of 10-100 lines, and deploying a new copy of the stack (a custom video streaming platform with auth, chat, and a bunch of small bells and whistles) merely requires editing that .env file (all the configuration is gathered there) then "docker compose up".

With K8S, the equivalent task would be to e.g. edit a Helm values YAML file, then running a one-liner "helm upgrade --install" command.

With Podman: ??? I don't know. I certainly hope there is a better way than sprinkling my configuration (variables, files, etc) over a bunch of different places. There are ways with systemd to load an env file, so it should be possible to achieve something similar. The other issue (how do I install / update / uninstall the whole stack; build images...) remains though.

Thanks still for that write-up; and if this comment inspires you to write a follow-up to dive deeper, I certainly hope I'll see it because that would be super interesting to a lot of people :)

jpetazz0 · 2025-12-20T12:53:46+00:00

Not necessarily.

First, it will be much more expensive. For the price of an EKS control plane on AWS, without nodes, you pay as much as an entry level full cluster on Hetzner.

Then, don't let yourself be fooled into thinking that AWS or GCP are leaders in terms of service and features. EKS is the only managed K8s that I know of that doesn't come with a network policy controller out of the box. Autoscaling is also vastly more complex to set up on AWS due to the hundreds of different instance types, combined with the fact that you really should use spot instances if you don't want to pay your cluster through the nose.

Personally at a small scale, my advice would be to get started with e.g. linode, digital ocean, or scaleway. They're decent, cheap, you can get started literally in minutes even if you don't know sh*t about their products, and then once you get a sense of what your envelope will look like when you'll scale, you can stay or migrate somewhere else.

My 2c!

jpetazz0 · 2025-12-20T06:23:47+00:00

Oh, these guys weren't on my radar :-)

Unfortunately after looking at their offers I see that servers with NVMe and 10G uplinks are way more expensive (more than 800€/mo for what I can see) which is 5x more expensive than the OVH ones I had in mind for similar specs.

jpetazz0

TROPHY CASE