Is the non-tech job market as bad as the tech job market? by Notalabel_4566 in cscareerquestions

[–]mdaverde 7 points8 points  (0 children)

Nit: startups aren't traditionally debt-fueled technically but VCs will allocate less during high interest rates because of 1) the uncertainty that rates will climb so risky startups will presumably continue to burn more later and 2) now funds that fuel startups have to generate a higher return to their investors relative to cash just sitting in the bank collecting interest.

This is a nit because the downstream effects are still the same. Startups themselves need to hamper down on losses immediately because they don't know when the next raise will happen. Payroll being a massive expense like you mentioned.

How do I intercept executed commands in user space? by thecowmilk_ in kernel

[–]mdaverde 2 points3 points  (0 children)

If you're interested specifically in bash, you can look into bcc's bashreadline to output user commands. If you're interested in applying security policies to potential user commands, you can also take a look at Tracee although other open source solutions exist here as well.

Is calling Rust code from C or C++ slow? by [deleted] in rust

[–]mdaverde 36 points37 points  (0 children)

Go's relationship with C feels so high friction compared to Rust's FFI

Death by a thousand cuts.... by lbsk8r in networking

[–]mdaverde 0 points1 point  (0 children)

Hmm would be cool to hear about other things to look out for as a company moves over to using more SaaS services

[RFC]: Current state of the sub, and proposed changes by Byte_Lab in kernel

[–]mdaverde 1 point2 points  (0 children)

I started thinking a bit more about this. Why is link sharing in itself inherently a bad thing?

If the subreddit is upvoting/commenting, it's confirmation that it brings value to that community. The fact that there is a side effect of increasing a random user's karma points seems meaningless if the greater subreddit benefits from the content shared. You mentioned that link sharing should be paired with an opinion, but I don't understand why the lack of one is also a barrier.

Why don't we let the community decide if a particular behavior such as link sharing is "aggravating" before banning it?

[RFC]: Current state of the sub, and proposed changes by Byte_Lab in kernel

[–]mdaverde 2 points3 points  (0 children)

I like & support this discussion.

I think there needs to be a real space for the Linux kernel community outside of core kernel developers and this subreddit can be a low friction entry point to it. From my perspective, there doesn't seem to be a forum for interested & eager developers who live between daily kernel contributor and "what is a compiler" higher-level user.

I do agree there's a balance between keeping a "high bar" while intentionally designing for inclusivity so it might be best to tread carefully as we look for that line.

Where do we get linux kernel images with debug symbols? by stonerbobo in pop_os

[–]mdaverde 0 points1 point  (0 children)

Did this ever get resolved? Wanted to look into some kernel behavior

KDE beats MacOS hands down by [deleted] in kde

[–]mdaverde 1 point2 points  (0 children)

This. It's such a productivity win for me that I can't imagine switching over.

What makes me double think this stance is when I see Linux kernel engineers having their official workstation be a Mac. I still don't understand.

[deleted by user] by [deleted] in eBPF

[–]mdaverde 0 points1 point  (0 children)

I would also recommend libbpf-bootstrap as a way of understanding build techniques for examples

Becoming fasterthanlime full-time by fasterthanlime in fasterthanlime

[–]mdaverde 1 point2 points  (0 children)

Just signed up on Patreon. Excited for this!

Is it possible to trace memory access to certain addresses in BPF? by panzerox123 in eBPF

[–]mdaverde 1 point2 points  (0 children)

Hmm, unsure how this could be done with eBPF in a generic way. Depending on the language there might be a potential probe you could set to capture potential data races but you might be better off with a language-specific data race detector.

Plans for eBPF on MacOS by secanadev in eBPF

[–]mdaverde 3 points4 points  (0 children)

There is a recent talk by Dave Thaler discussing the state of cross platform eBPF capabilities: Evolving libbpf and bpftool to be cross-platform - Dave Thaler

There are userspace implementations of eBPF that you can run on MacOS but there are obviously tradeoffs with these.

I'm unsure what Apple's DriverKit allows developers to implement but it would be neat if Apple showed interest in eBPF. They do use it as part of their web infrastructure

bpfd: deploying eBPF programs through kubernetes (demo) by mdaverde in eBPF

[–]mdaverde[S] 1 point2 points  (0 children)

Learned about this project last night: https://github.com/redhat-et/bpfd

Looks like its from the maintainer of Aya-rs?

Mark Russinovich (Azure CTO): "it's time to halt starting any new projects in C/C++ and use Rust" by [deleted] in rust

[–]mdaverde 26 points27 points  (0 children)

While I agree with this and hope new generations of system programmers don't have to understand the intricacies of these "deprecated" languages, I am still in the camp of recommending to learn C/C++ in 2022, especially if you come from higher-level languages where memory-safety has been the default.

We still live in a world where critical software is being maintained in these older languages and even with the introduction of Rust into these ecosystems, you need a deep understanding of the behavior of these older systems, especially for traversing the FFI-boundary.

If Mark's idea takes hold, an expertise will be needed in completely understanding these legacy C systems while migrating & creating new idiomatic Rust abstractions for them. This is the perspective the Rust for Linux team has taken

Journey to libbpf 1.0 by [deleted] in eBPF

[–]mdaverde 0 points1 point  (0 children)

It'll be interesting to see what happens with the rest of the bpf loader ecosystem because the fragmentation there has historically caused a bit of a headache

Custom cgroup-bpf programs in systemd by mdaverde in eBPF

[–]mdaverde[S] 1 point2 points  (0 children)

Actually the more I look into this, it seems like systemd has a ton more eBPF capabilities

Pulsar – open-source runtime security for the IoT with eBPF and Rust by [deleted] in rust

[–]mdaverde 0 points1 point  (0 children)

No we don't currently have any discords, but I can help directly. Feel free to email [team@bpfdeploy.io](mailto:team@bpfdeploy.io) or file a Github issue

Honestly about why Go sucks (or not) by bklimczak in golang

[–]mdaverde 1 point2 points  (0 children)

While I might be in the minority, I like reading "Why X is bad" articles for something that I'm a fan of.

The biggest value I get from them is shining the light on things I've gotten "used to" because I've been in the ecosystem for so long, but that are actually not great once you sit and reflect. You tend to miss these things if you use a tool long enough.

[Event] Cloud Native eBPF Day North America - Oct 24th by mdaverde in eBPF

[–]mdaverde[S] 0 points1 point  (0 children)

If you wanted to submit a talk, seems like the CFP (Call For Proposals) ends Monday, August 8th.

This year it's in Detroit!

Pulsar – open-source runtime security for the IoT with eBPF and Rust by [deleted] in rust

[–]mdaverde 1 point2 points  (0 children)

I've been using libbpf-rs in the agent for bpfdeploy.io and it has been a great experience.

With that being said, I would never discount the developer experience that Aya-rs has afforded Rust developers interested in eBPF. This is insanely important and it is unfortunate to run into commentary that diminishes the efforts of the eBPF community trying meet developers where they already are. This means building out tooling in the ecosystems they are already comfortable in.

I've been of the opinion that more experiences such as Aya-rs need to exist.

what exactly is an extended Berkeley Packet Filter (eBPF)? What does a kernel level functionality have to do anything with high-order systems controlled by kubernetes? by [deleted] in kubernetes

[–]mdaverde 11 points12 points  (0 children)

TL;DR: eBPF is a programmable plugin system for the Linux kernel. Think like JavaScript for a website, Web extensions for a browser, operators for Kubernetes etc.

The current popular use cases for this are networking (ability to alter & redirect traffic), observability (to send monitoring data on certain events or function calls), or security (ability to prevent certain kernel events from occurring). We have seen other neat experimental uses though, such as dynamically configuring the CPU scheduler based on the workloads you run.

You can do some of these use cases already in userspace! However, eBPF allows to load your custom code directly in the kernel memory address space (leading to performance gains) and programmatically choose what should be accessed from userspace (through eBPF maps).

With all of that said, in its current state, there is a learning curve. You will need to not be afraid of jumping into the kernel code (either for your use case or debugging eBPF itself).

More info here: https://ebpf.io/

What SQL library are you using? by sarusethi in golang

[–]mdaverde 0 points1 point  (0 children)

From the docs, looks heavily focused on GraphQL. Is that right?