farcaller

A birb in engineering. I design, code, and make it all reliable.

Public Key

npub1wc5saxwyesuu3qpak2qq5asup0dgwhnsy3dfp9t66j8g32d6dl5sn2qzxm

NIP-05 Address

farcaller_at_hdev.im@mostr.pub

Profile Code

nprofile1qqs8v2gwn8zvcwwgsq7m9qq2wcwqhk58teczgk5sj4adfr5g4xaxl6g6uxgg0

Author Public Key

npub1wc5saxwyesuu3qpak2qq5asup0dgwhnsy3dfp9t66j8g32d6dl5sn2qzxm

Show more details

Last Notes

2024-11-18 21:23:01

tfw I can't have a #clojure project with a full-stack app because my backend depends on protojure (the clojure grpc library) which depends on java protobufs, and my frontend depends on google closure compiler which (obviously) uses protobufs too (because they are so great to keep the internal state).
The closure compiler depends on a legacy version of those, of course.

2024-11-05 20:05:50

This is legit the best ever explanation of "curl google.com".
Sound on
https://www.youtube.com/watch?v=atcqMWqB3hw

2024-09-18 13:14:38

- reply

@npub1vjg…0l8u that's a very valid point! But still, I'd be peculiar to see more on specifically using clojure for data science in general. I’ll google around.

2024-09-18 10:13:28

I’m really not sure how I feel about this #heartofclojure boat modelling talk. On one hand it was real fun and I learned something about sails. On the other hand, why'd you use clojure for this all? Why not R or python that seem to be a much better fit for the job?

2024-09-04 09:32:43

What's the point to ask me for an SSO if your login flow requires me to create a first-party account right after it?..

2024-08-20 15:34:52

- reply

@npub1x30…upec make sure you don’t break HANDS in the process!
(sorry, it's a really bad pun. I’ll see myself out!)

2024-08-20 15:08:32

#affinity team is very clear they are not trying to pull the adobe thing with the privacy policy updates, heh.
https://hdev.im/system/media_attachments/files/112/994/976/494/898/054/original/e000c4106815c0ed.png

2024-08-19 19:54:48

me: should I use terraform or pulumi?
@npub12p4…snd6: pulumi
me 2 hours later: ok, I think I fixed this insanity poetry2nix is and pulumi-bin is working and I can auth both to my local s3 for state and vault to fetch the gcp credentials... what was I doing again?..

2024-08-19 19:47:26

expectation: I'll just use @npub12qe…enlx
reality:
https://hdev.im/system/media_attachments/files/112/990/410/816/500/696/original/34b74ac4f90d01f3.png

2024-08-15 20:16:38

- reply

@npub1ane…7zqz ah right. I feel your pain there, heh.

2024-08-15 20:11:11

- reply

@npub1ane…7zqz soooo. First, writing your own DNS isn't that hard. Hah.
Second, why not terminate everything on NextDNS and use either its daemon's flags or tailscale's magicdns to do split horizon?

2024-08-13 05:36:38

- reply

It **was** glued to the ceiling. Ffs.

2024-08-13 04:34:26

Why do smoke detectors batteries only die at night? Preferably deep night?
I can’t take this thing off 😭

2024-08-10 17:38:52

- reply

@npub1g5v…yz00 I have this clojure script that exports logseq blog posts into hugo-themed markdown that I can share if you want to get your hands dirty.

2024-08-08 19:44:33

- reply

@npub1lfd…gptz I always liked Objective-C. In the end I just traded `[[[[`s for `((((`s!

2024-08-08 18:03:51

Achievement unlocked: tried (and failed) to use paredit hotkeys to wrap a piece of markdown in []. That's what you get after only half a year of #lisp / #clojure.

2024-08-08 16:22:44

someone took "stack overflow" in stackoverflow.com too literally, huh.
https://hdev.im/system/media_attachments/files/112/927/320/462/409/165/original/ff2818994765ad41.png

2024-08-07 07:23:28

I wake up and External-Secrets is broken. Why? Because vault is not reachable? Why? Because tailscale operator's DNS is not returning the records. Why? Because "error getting the EndpointSlice for the proxy's headless Service: found multiple matching *v1.EndpointSlice objects". Why? Because I updated cilium and it now correctly supports EndpointSlice objects and tailscale doesn't: https://github.com/tailscale/tailscale/issues/13056
FFS. On one hand I really like tailscale, but their k8s operator is so fragile.

2024-08-05 11:56:05

Apparently if you put a reverse_proxy inside of handle_response inside of reverse_proxy in #Caddy (to send the request to another backend if the first one returns 404), then Caddy kind of goes insane and spits random 502s.
It was a while since I had to configure nginx.

2024-08-02 15:18:40

- reply

well fsck. Am I covered under the rm -rf .git && git clone joke?
https://hdev.im/system/media_attachments/files/112/893/094/771/084/879/original/b6e9da429b241db5.png

2024-08-02 15:12:54

Fancy, I broke git.
@npub12p4…snd6 is this a win?
https://hdev.im/system/media_attachments/files/112/893/072/033/255/104/original/4971bc5324cb8466.png

2024-08-01 20:00:50

- reply

@npub1vut…3hvp yeah, it does.

2024-08-01 19:51:32

- reply

@npub1vut…3hvp seems to render correctly for me?
https://hdev.im/system/media_attachments/files/112/888/505/398/820/532/original/120abc101a44a703.png

2024-08-01 17:00:53

If you're a #EU citizen please go and sign this https://citizens-initiative.europa.eu/initiatives/details/2024/000007_en# and try spreading it as wide as you can (it's the EU petition for https://www.stopkillinggames.com/).

2024-07-24 20:09:33

Mood.
https://hdev.im/system/media_attachments/files/112/843/277/748/740/426/original/8476be53a04bfecc.png

2024-07-24 17:34:53

So I had this Epson ecotank printer for a year now and I'm still on the original batch of ink. With canon we ran 3-4 packs of inks yearly. Epson rocks.
https://hdev.im/system/media_attachments/files/112/842/669/586/854/455/original/02ddcf263ac8f5a2.png

2024-07-24 16:21:10

- reply

@npub1ane…7zqz https://www.youtube.com/watch?v=aGSKrC7dGcY

2024-07-18 10:47:30

- reply

@npub1wfk…ugda ikr? not only it provides good search results out of the box, the whole bang thing is very discoverable and efficient.

2024-07-17 12:52:45

Software is hard. Hardware that runs software is double so.
Here's the screenshot of the my electricity consumption. It's calculated as the power solar PV inverter produces sans the power that's exported to the grid. Physics kind of dictates that I cannot export more than I produce. Right? Right?..
Fml.
https://hdev.im/system/media_attachments/files/112/801/924/038/333/043/original/086d5035946cad64.png

2024-07-16 17:12:55

- reply

@npub1dsl…succ https://www.myinstants.com/en/instant/metal-gear-solid-alert/

2024-07-16 12:26:21

- reply

@npub1mle…xfsx
https://hdev.im/system/media_attachments/files/112/796/157/905/104/309/original/0949ac56d71b7824.png

2024-07-16 10:59:14

- reply

@npub1ane…7zqz grab pwru (https://github.com/cilium/pwru) and see where the packet spends its time. Just limit its journey to a single node on the cluster.

2024-07-16 10:19:12

- reply

@npub1gfd…7gg6 how about `stat /` and/or `getfacl /` ?

2024-07-15 08:19:08

- reply

@npub1ane…7zqz what is it, a swap for ants?

2024-07-14 19:31:39

- reply

@npub1wln…gc52 wait... we have compiler extensions?!..
*stocks up on coffee*

2024-07-14 13:39:39

- reply

Now, how'd I approach this problem? If the user has auto hold on, the car first engages it, and then the drive mode. Never race on what happens there. With the door thing, it is a safety issue, but again, if the auto hold setting is on, just don’t let the driver engage the drive mode until the door is properly closed then, i.e. err on a side of predictability, which is: the car with auto hold on never tries to drive unless you push the gas pedal down.

2024-07-13 18:37:52

- reply

If you wonder, that's a tempo traceql query of
{ resource.service.name = "powermetrics" && name = "run-scrape" }
I really don't understand how it can be that random.

2024-07-13 18:35:57

me: refreshes the grafana dashboard with the time interval set to now/d
grafana:
https://hdev.im/system/media_attachments/files/112/780/624/312/529/253/original/40476ea9f2ad9f8d.mp4

2024-07-12 11:30:14

"Just go back to Ubuntu," they said.
In the meantime, Ubuntu: https://gld.mcphail.uk/posts/ubuntu-security-updates-are-a-confusing-mess/

2024-07-11 16:22:39

- reply

I know I'm overdoing the backup sometimes, but I think I just found some of the stuff I wrote back in 1998.
Man, I didn't really think to write any comments back then.
https://hdev.im/system/media_attachments/files/112/768/775/506/545/997/original/dc945491bdf43eac.png

2024-07-11 16:15:51

- reply

Oh look, the JTAG pinout for Palm Tungsten T3 from 2007.
https://hdev.im/system/media_attachments/files/112/768/748/777/069/312/original/d06575a3f367d932.png

2024-07-11 15:56:46

- reply

so I figured how to restore the partclone image, the kernel still supports resierfs, so I mount thing thing and what do I see inside?
https://hdev.im/system/media_attachments/files/112/768/673/710/402/563/original/4da25a6dc4792e97.png

2024-07-11 15:44:30

Time for some minor software archeology.
https://hdev.im/system/media_attachments/files/112/768/625/526/104/792/original/5cdb7196dc89c37d.png

2024-07-09 17:22:39

- reply

@npub1y0s…mzh2 I saw the exact same thing and I noticed that downloading *through* hetzner (i.e. tunnelling via a server that's physically there) doesn't exhibit this behavior as much.

2024-07-08 13:50:15

- reply

@npub1ane…7zqz which CNI?

2024-07-07 19:49:40

Apparently having jwt or oauth-based authentication is an enterprise feature in pretty much every single "open source" kubernetes ingress. Peasants should be fine with the basic auth amirite?

2024-07-07 18:37:08

#traefik is annoyingly eventually inconsistent in the worst way. I had to reboot the cluster and traefik came up before coredns did, meaning there was a brief window where traefik couldn’t resolve dns. It was long enough for it to try downloading the plugins (which it does every startup) and to fail. Unfortunately, it wasn’t critical enough issue for it, so it continued starting up and reporting healthy even though half of the middlewares were now screwed without the jwt plugin and the actual ingress was failing.

2024-07-06 19:44:36

How I stopped worrying about nodejs ram usage and embraced clojurescript.
At 3Mb idle you can't really care less. I just added some pod resource limits so that node's gc is marginally more excited and there you go, the RAM usage is comparable to go.
I dare you to run clojure (the jvm one) in that footprint. I doubt you can do that with graalvm either tbh.
https://hdev.im/system/media_attachments/files/112/741/258/085/285/922/original/44b16b53c918f316.png

2024-07-06 10:41:27

- reply

@npub1ane…7zqz that's fair!
(I'm actually running vault myself, still. I'm just annoyed that I have to recompile it now. But there's no openbao in nixpkgs anyway, yet)

2024-07-06 10:35:38

- reply

@npub1ane…7zqz why not OpenBao? :-)

2024-07-06 07:18:53

After spending ages trying to figure the "dataset is busy" issue, I finally decided to check zfs holds. Lo and behold, zrepl is holding to this snapshot for reasons!

2024-07-04 15:59:20

Another day, another major mastodon vulnerability.

2024-07-04 12:28:02

me: I need to consume more than PVs produce to check out the code
the sun: shines really hard
the clouds: don't exist

2024-07-04 12:25:04

I have a metric that says how much the inverter produces in watts. I have another metric that says how much power is passing towards the grid (in kW). So, I suppose, I could do something like this:
(huawei_device_power_sensor_active_power_w > bool 0) * (huawei_device_inverter_active_power_kw * 1000 - huawei_device_power_sensor_active_power_w)
+ (huawei_device_power_sensor_active_power_w <= bool 0) * (huawei_device_inverter_active_power_kw * 1000)
To plot the consumption from specifically the solar energy.
Why is this all so complicated.

2024-07-04 09:50:16

I'm not sure if this is legal, electricity-wise, but at least this graph looks similar to what the huawei's own dashboard is showing.
The SRE approach: you just randomly multiply metrics until you see something that looks similar to the other monitoring.
https://hdev.im/system/media_attachments/files/112/727/596/420/831/433/original/5791fdd46857802f.png

2024-07-04 09:30:31

How do you like an API that might return a numeric value (the docs say "Double"), but it might return a nil, or even a string!
https://hdev.im/system/media_attachments/files/112/727/518/778/987/258/original/ef2606964c3f101e.png

2024-07-04 08:36:07

- reply

@npub1dsl…succ this is nuts. I really want to report some issues but when I see a non-github hosting with some login restrictions (we'll approve your account manually. Eventually) I just give up.

2024-07-03 19:45:06

- reply

Luckily, clojure has macro capabilities that, unlike rust procedural macros, aren't a massive PITA. So now both the metric definition and reporting is neat and concise.
https://hdev.im/system/media_attachments/files/112/724/273/111/509/093/original/5ac6df8968abb86d.png

2024-07-03 18:20:37

- reply

Do you see what I see and think "if only my language had some macro capabilities to reduce the redundancy of this bs"?
https://hdev.im/system/media_attachments/files/112/723/940/865/302/614/original/0c93a1da644c3e25.png

2024-07-03 18:17:55

#clojure repl things: I'm live writing some prometheus metrics and a parser for them while the actual server is running and vmagent pulls data from it as I write it, so I can see the updates to my code in autoupdating grafana window straight on.
This is witchcraft.

2024-07-03 09:04:35

me: walks past the kids' room
kids: quietly listen to some heavy metal
me: tears of joy

2024-07-02 19:33:36

- reply

Here's a peculiar thing. There's no more Endpoint resource for the pod. Where did it go? Dunno. It's just missing. The EndpointSlice is there however. Traefik, of course, doesn't support those (https://github.com/traefik/traefik/issues/10638).

2024-07-02 19:26:03

#traefik be like: I guess I'll just stop caring about this ingress.
https://hdev.im/system/media_attachments/files/112/718/535/899/849/426/original/d442e01268bb3d09.png

2024-07-02 18:18:56

A great read on the history of Git and how it ended up where it is.
https://blog.brachiosoft.com/en/posts/git/
#fridayreads

2024-07-02 17:17:49

For whatever reason no one packages powerdns in a nice simple self-updating docker image. At the same time, powerdns is the simplest way to run a local resolver for external-dns.
https://github.com/farcaller/powerdns-docker/pkgs/container/powerdns-docker
You're welcome.

2024-07-02 09:08:54

TIL clojure's comment macro actually returns nil. That really explains why I was seeing all those nils returned from some testing code.
FFS. A language where commens have a return value, can you imagine?
/me uses `#_` from now on.

2024-07-02 07:36:00

So is there anyone who moved from #nixos to #guix because of all the stuffs? @npub1q0k…trsm you checked out guix yet?

2024-07-02 07:30:31

- reply

And it's back to business. Wat was it? no idea, but I'm keeping my backup coredns setup now (and maybe extending it with dnscrypt once again).
https://hdev.im/system/media_attachments/files/112/715/722/287/621/471/original/ec0060a63f6eefb8.png

2024-07-01 21:43:07

/ip firewall mangle
add action=mark-routing chain=prerouting comment="EMERG ROUTE ALL VPN" dst-address-list=!LAN new-routing-mark=protonvpn passthrough=yes src-address-list=LAN
Whatever, I'll figure it out tomorrow.

2024-07-01 21:19:01

This doesn't seem quite right #nextdns
https://hdev.im/system/media_attachments/files/112/713/317/739/416/770/original/48287df580a191a3.png

2024-07-01 20:31:28

So all of a sudden nextdns stopped working **at all**. For whatever reason I couldn't easily get Mikrotik to do the DNS again so lo and behold, ProtonVPN helps me to build a nixos derivation that has coredns and then it's a matter of some DNAT. We're flying again!

2024-07-01 19:21:04

- reply

I poked more at this and actually it falls apart not at the layering but at the LUKS—the CPU can't handle more than 400mbit/s for aes.

2024-07-01 15:17:54

- reply

@npub1ane…7zqz you can set compression=off to stuff like photos & videos as there's a very slim chance for anything in there to have any good ratio so why even bother.

2024-07-01 15:14:20

- reply

@npub1ane…7zqz did you go for the native encryption?

2024-07-01 15:08:14

- reply

@npub1ane…7zqz those are some rookie numbers!
https://hdev.im/system/media_attachments/files/112/711/859/812/178/538/original/fd99f2c35e789c4c.png

2024-07-01 14:25:10

- reply

@npub13wf…ch5a that's a funny way to spell "send email"

2024-07-01 13:54:40

So here's how you patch ssh in your nixos flake:
https://hdev.im/system/media_attachments/files/112/711/570/524/661/397/original/6e1af2bc9f852d53.png
https://hdev.im/system/media_attachments/files/112/711/570/538/785/060/original/8848b9ff29b5c7e5.png

2024-07-01 12:54:09

- reply

@npub1gfd…7gg6 that feel when you no longer have publicly-exposed ssh access. Oh well, now onto the patching.

2024-06-30 21:07:43

- reply

@npub1fgp…wcda the problem I’m solving is having a spare synology box (on which I can’t install a generic linux), and wanting a second backup to use a different method (thus zfs replication).

2024-06-30 19:29:32

- reply

On one hand, 47MiB/s is insanely low. On the other hand, this is a remote backup location and I'm somewhat limited by a 100mbit/s upload speed anyway.
https://hdev.im/system/media_attachments/files/112/707/224/944/392/313/original/2a4233dcfa8c16a0.png

2024-06-30 19:08:58

zfs over luks in a vm over synology's btrfs over lvm over raid5 + raid1 doesn't sound like such a good idea anymore.
I suppose I can just rclone to this remote too...

2024-06-30 18:19:55

- reply

@npub1agu…4887 IIRC that meant "Вопрос". But I can't actually figure the correct iconv cmdline to verify that now.

2024-06-30 17:39:48

- reply

@npub10gg…a0hf I was inspired by https://mastodon.bida.im/@ale/112706777903785253!

2024-06-30 17:37:43

бНОПНЯ

2024-06-29 10:24:10

- reply

And here's the blog post: https://social.farcaller.net/@blog/112699387449172392

2024-06-29 09:50:01

- reply

@npub1ane…7zqz I did the same thing yesterday, but opted in for clojure, heh.

2024-06-29 07:24:06

- reply

For the context: one of my pods loses ipv6 connectivity. Sometimes. Thanks to the pretty amazing pwru I nailed the paths of good and bad packets to the difference where the bad packets have to seemingly do NDP and fail: https://github.com/cilium/cilium/issues/33467

2024-06-29 07:19:04

And how's your morning going?
https://hdev.im/system/media_attachments/files/112/698/690/307/137/025/original/d3e78519d693aad9.png

2024-06-28 12:50:03

- reply

@npub1ane…7zqz https://www.aliexpress.com/item/1005004182442458.html these things are decent.

2024-06-28 09:18:58

The Riven 2024 remake is actually very nice. For me, the firmament was a bit of a flop, but Obduction was nice, and it's great to see new puzzle elements in the Cyan's classic.
Here's me holding the Myst linking book out of Gehn's reach.
https://hdev.im/system/media_attachments/files/112/693/497/368/836/494/original/0a91cd79ea740019.jpeg

2024-06-28 07:49:06

- reply

@npub1gfd…7gg6 easy, just move to a mac. It not only has window closing at cmd+w, but also natively supports a huge chunk of emacs shortcuts in every single text input field.

2024-06-27 20:57:02

- reply

In the end it was easy. Traefik was passing down X-Forwarded-Host to a backend... behind the same traefik, who happily stripped off the header. I'm exhausted but auth works. Blog post tomorrow.

2024-06-27 20:34:00

- reply

I need more swap...
https://hdev.im/system/media_attachments/files/112/690/491/537/128/627/original/8b81a06ba421ae5f.png

2024-06-27 20:32:47

You know the evening is a miss when you're downloading #traefik source code because of an obscure bug and the lack of proper logging around the middleware where it's called.
make build-image, here I go.

2024-06-27 08:12:52

me: wow this clojure code is verbose, let me rewrite it with macros!
me: yay, macroexpansions!
me a day after: I could have totally written this as regular functions...

2024-06-26 20:01:06

- reply

@npub10gg…a0hf you're ruining my fun! Couldn't you at least suggest to write it to sqlite?

2024-06-26 19:56:23

With #huawei API rate-limited to 25 API calls per **day** I start considering a persistent caching strategy. Maybe a redis sidecar?
Oh boy, I'm totally overenigineering this.
https://hdev.im/system/media_attachments/files/112/684/681/283/283/012/original/34d4a1fce3f2146c.png

2024-06-26 12:40:06

- reply

I'm the idiot who didn't update the firewall rule :-D

2024-06-26 11:17:44

There's something really fucky going on with homekit... as long as I observe the shortcut, it sends http requests. If I stop observing it, it stops doing anything, too.
Honestly, the whole homekit is so painful to use at times, but it's also the only thing in the house that can collect the temperature/humidity data from all the devices (hue sensors, nest thermostats, apple homepods, and a very dumb lg aircon).

2024-06-26 11:15:37

- reply

@npub1qv5…k9w9 Leave-On-Low.