Archive

Linux: The Unix Clone by the Git author

I have been a git user since 1997 or so. The first versions of this domain started out as a CD shop shipping Linux and Open Source Software on CDs to buyers in India.

AlmaLinux OS An Open Source, community owned and governed, forever-free enterprise Linux distribution, focused on long-term stability, providing a robust production-grade platform. AlmaLinux OS is 1:1 binary compatible with RHEL® and pre-Stream CentOS.

via github.com/lsc4719

I purchased a license for unraid on 2025-02-12 to build my homelab using an existing Lenovo i7 PC from around 2017 or so.

opdroid1234 had some recommendations to upgrade the storage:

1. get some HDDs from serverpartdeals
2. and two memory sticks from here (3x Intel Optane Memory M10 SSD M.2 2280 16GB MEMPEK1J016GAL PCIe 3.0 Xpoint NVMe) as [zfs] cache.

Free, open-source, cross-platform. Share files without a central server. The file transfer is completely peer-to-peer.

LocalSend is available for Windows, macOS, Linux, Android, and iOS.

LocalSend is free to use. No ads, no tracking, no hidden costs.

The source code is publicly available. Everyone can contribute to the project.

End-to-end encryption ensures that only you and the recipient can access your files.

A simple user interface without registration. Other devices are discovered automatically.

Tart - Tart is a virtualization toolset to build, run and manage macOS and Linux virtual machines on Apple Silicon.

Workstation VMs with LXD & Multipass

UCB CS294-113: Virtual Machines and Managed Runtimes

The What, Why and How of Containers – Annwan; HN

--

Lima. Lima launches Linux virtual machines with automatic file sharing and port forwarding (similar to WSL2), and containerd. Lima can be considered as a some sort of unofficial "containerd for Mac". Lima is expected to be used on macOS hosts, but can be used on Linux hosts as well. colima is a container environment on macOS with minimal setup that uses lima-vm.

Create an LXD container in Macpine - Macpine

GoogleContainerTools/distroless: 🥑 Language focused docker images, minus the operating system.

Wolfi "is a community Linux OS designed for the container and cloud-native era. Chainguard started the Wolfi project to enable building Chainguard Images, our collection of curated distroless images that meet the requirements of a secure software supply chain. This required a Linux distribution with components at the appropriate granularity and with support for both glibc and musl, something that was not yet available in the cloud-native Linux ecosystem. Wolfi is a stripped-down distro designed for the cloud-native era. It doesn't have a kernel of its own, instead relying on the environment (such as the container runtime) to provide one. This separation of concerns in Wolfi means it is adaptable to a range of environments."

Chainguard Images contain only what is required to build or run your application. This results in fewer CVEs over time compared to other base images and on average an 80% reduction in overall size.

• Signed with Sigstore
• SBOMs included

lucavallin/barco: Linux containers from scratch in C.

abiosoft/colima: Container runtimes on macOS (and Linux) with minimal setup is an alternative for podman

Bottlerocket is a Linux-based operating system optimized for hosting containers.  

• Bottlerocket is installed as the base operating system on the machine or instance where your containers themselves are running.
• It is designed to work with container orchestrator like kubernetes to automate the lifecycle of the containers running in the cluster.
• Bottlerocket runs in the cloud or in your datacenter.
• Bottlerocket is designed to be updatable but it doesn’t have a package manager. It doesn’t need one. Updates are delivered via an image that is downloaded to a specific partition. When you’re ready to update, let your orchestrator drain the node and then tell Bottlerocket to apply the update and reboot when ready. Bottlerocket will swap the partitions and boot with the new version atomically.
• Bottlerocket’s unique functionality is written in Rust and a little bit of Golang.
• The root filesystem of Bottlerocket is immutable.
• Bottlerocket has an always-enabled, enforced, restrictive SELinux policy
• It does not have a shell
• You can still interact with the system through privileged “host” containers (that do have shells)

Docker is an open-source engine which automates the deployment of applications as highly portable, self-sufficient containers which are independent of hardware, language, framework, packaging system and hosting provider.

See also:

• nanobox
• Nabla containers: a new approach to container isolation · Nabla Containers

Building docker from scratch

• A Workshop on Linux Containers: Rebuild Docker from Scratch | Hacker News
• Fewbytes/rubber-docker: A workshop on Linux containers: Rebuild Docker from Scratch
• (1) Building a container from scratch in Go - Liz Rice (Microscaling Systems) - YouTube
• (1) Golang UK Conf. 2016 - Liz Rice - What is a container, really? Let's write one in Go from scratch - YouTube
• (1) Cgroups, namespaces, and beyond: what are containers made from? - YouTube
• Building Containers in Pure Bash and C
• Linux Namespaces – Ed King – Medium
• p8952/bocker: Docker implemented in around 100 lines of bash
• tonybaloney/mocker: A crappy imitation of Docker, written in 100% Python
• Docker Without Docker

Articles

• Dockerfile best-practices for writing production-worthy Docker images.; Jan 2021
• Docker is the dangerous gamble which we will regret | Smash Company
• 12 Fractured Apps — Medium -- docker anti-patterns.
• Intro do docker on infoq
• Tutorials on Docker
• Docker cheatsheet
• Why I don't use Docker much anymore - Abe Voelker
• Docker in Production: An History of Failure – The HFT Guy Nov 2016. Follow up: Docker in Production: An Update – The HFT Guy Feb 2017.
• Docker Considered Harmful Jan 2016.
• Mitigating Docker security issues
• Another reason why your Docker containers may be slow
• The Cost of Containerization for Your Scylla - ScyllaDB

Software related to docker:

• abiosoft/colima: Container runtimes on macOS (and Linux) with minimal setup

• Alpine Linux Docker image -- A super small Docker image based on Alpine Linux. The image is only 5 MB and has access to a package repository that is much more complete than other BusyBox based images.

• pauldotknopf/darch

It is essentially Docker, but you can boot bare-metal with it. It even uses Docker under the hood. Every boot is a fresh boot. You can read-write during boot, but all changes are made to ram. You mount with fstab things you want persisted, like home. It uses very simply primitives, which makes it easy to use. Squashfs/grub-mkconfig/overlayfs/etc. Docker isn't exactly a "primitive", but it is easily reasoned with. reply -- creator comment

• GoogleContainerTools/jib: Build container images for your Java applications. (also see fabric8io/docker-maven-plugin)

• GoogleContainerTools/distroless: 🥑 Language focused docker images, minus the operating system.

• coord-e/magicpak: Build minimal docker images without static linking "enables you to build minimal docker images without any bothersome preparation such as static linking."

# You prepare /bin/your_executable here...

ADD https://github.com/coord-e/magicpak/releases/latest/download/magicpak-x86_64-unknown-linux-musl /usr/bin/magicpak
RUN chmod +x /usr/bin/magicpak

RUN /usr/bin/magicpak -v /bin/your_executable /bundle

FROM scratch
COPY --from=0 /bundle /.

CMD ["/bin/your_executable"]

BuildKit in depth: Docker's build engine explained | Hacker News

Building container images - using no tools · Ravikanth Chaganti

More Articles

• Learn Docker by Building a Microservice
• September 2016. Moving from Docker to rkt

Dockerizing applications

• OddMuse Wiki Dockerized. See also - Docker Compose | Docker Documentation

Nix and Docker

• Nix is a better Docker image builder than Docker's image builder; Mar 2024 by Xe