My build recipe for a runtime container image based on UBI Micro1 and the latest feature release of OpenJDK.
Small, secure, and tracks OpenJDK upstream. If you like to be on the latest OpenJDK (rather than some vendor’s LTS), this is for you.
I use it for this website and am very happy with it.
Footnotes:
A general-purpose physics simulation library with a focus on both speed and accuracy. Suitable for biomechanical, robotic, and other research-related simulations as well as graphics animation (such as in video games).
Has a C API, which makes it easy to bind to from any language.
A Java library for event sourcing. Based on the Cloud Events specification and designed to be a library of utilities rather than a framework.
A CNCF specification for the format of event-like messages.
Comments are now supported
This web site now supports comments.
Comments are simple and anonymous by default. They support a restricted number of HTML tags and their Markdown equivalents:
- blocks:
p,blockquote,pre - inline style:
em,strong,code,sub,sup,s,ins,del - lists:
ul,ol,li,dl,dt,dd - accessibility hints:
abbr,acronym
To comment, click the permalink hash mark (#) at the top of the post in question. Be sure to enable JavaScript in your web browser.
Paste Japanese text into the text box and receive a pitch outline.
Matthias
#
YAML style recommendations
While I’m not a particularly big fan of YAML overall, it does have some clear benefits over both JSON and XML for human-editable configuration files. And while there are some pretty compelling alternatives, YAML is currently ubiquitous, so it makes sense to make the best of it.
Here are my favorite simple style rules. I apply them aggressively whenever I see some YAML that isn’t bolted to the wall and fixed with superglue.
Rule 1. Indent enumerations.
Rule: Indent enumerated items relative to the key that defines them.
Reason: Adhering to the Rectangle Rule makes it easier to find where blocks begin and end.
Bad:
list1:
- item1
- item2
list2:
- item3
- item4
Good:
list1:
- item1
- item2
list2:
- item3
- item4
This is by far my favorite rule. Even if you do nothing else, it improves the readability of any YAML file by an order of magnitude.
Rule 2. Separate nested blocks by white space.
Rule: Use empty lines to separate blocks of nested content.
Hint: A good rule of thumb is that any block that has children should be surrounded by white space on both sides.
Reason: Empty lines make it easier to find where blocks begin and end.
Bad:
metadata:
name: mulkcms2
namespace: mulk
labels:
name: mulkcms2-web
app: mulkcms2
spec:
replicas: 1
selector:
matchLabels:
app: mulkcms2
group: mulk
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
Good:
metadata:
name: mulkcms2
namespace: mulk
labels:
name: mulkcms2-web
app: mulkcms2
spec:
replicas: 1
selector:
matchLabels:
app: mulkcms2
group: mulk
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
This is a rule that I apply not just to YAML, but to any type of code whatsoever. It not just helps with readability, but also with editability (by enabling me to navigate by block).
Official builds of OpenJ9, an alternate implementation of the JVM, from IBM.
While OpenJ9 is not OpenJDK, Semeru does use the OpenJDK class libraries.
Political slogans should target the center. But more importantly, the agenda should target the center. The Median Voter Theorem applies.
The package manager used by RedHat UBI Minimal container images. Like dnf, but written in C rather than Python.
Proposed to target JDK 19.
This is shaping up to be an interesting release (assuming you find preview features interesting).
A public API that you can query for available OpenJDK distributions and download links.
Ready-made container images for use with kubectl debug. There are images for Node, Python, Go, and Java.
A way to spin up ephemeral containers in a running Kubernetes pod that have access to the same process namespace as the running ones. Used to run debugging tools in production.
A bot that creates pull requests for project dependency updates. Supports multiple target languages.
A container system for GNU/Linux applications.
A free-as-in-freedom RHEL derivative similar to what CentOS was before it was converted into the CentOS Stream rolling release distribution, called into life by the original founder of CentOS.
A free-as-in-freedom RHEL derivative similar to what CentOS was before it was converted into the CentOS Stream rolling release distribution, by the people behind the commercial CloudLinux OS.
A collection of notes on application security (mostly web and mobile applications).
Highlight: cheat sheets related to the OWASP Top Ten web application security risks.
A CI-agnostic build and deployment pipeline definition tool. Works locally, too.
A general-purpose build system based on BuildKit.
A flexible build tool for container images. Capable of reproducible (timestamp-less) builds.