jamielinux

6 lat temudiscuss

You can sign modules using these instructions: https://docs.fedoraproject.org/en-US/fedora/f31/system-admin...

Though it's definitely a faff, and it's required every time there's kernel upgrade.

jamielinux

11 lat temudiscuss

  agwa wrote:
  > Last I looked nginx used fixed 1024 bit parameters, which is very bad.
  > I don't know if this has changed or if there's a bug report.

NGINX has had the ssl_dhparam directive (allowing dhparam of arbitrary size) since version 0.7.2, released in 2008.

jamielinux

11 lat temudiscuss

T.C. and I worked on getting jQuery packaged for Fedora [1].

It's quite painful trying to package npm modules in a way that's suitable for distributions like Red Hat/Fedora/Debian. The dependency tree just goes on and on and on, and there are versioning issues all over the shop. And if you want to run test suites in the package build process then you'd better package mocha, tap, tape, nodeunit, should, vows, expresso, jasmine, supertest etc. And all of their dependencies too. And make sure every test in the test suites for every module pass. By the end of it all, you're a broken, hollow shell of the person you were before, but at least now it's possible to run "yum install js-jquery" and get version 2.1.3 :-)

[1]: https://fedoraproject.org/wiki/Changes/jQuery

jamielinux

12 lat temudiscuss

The article states that host key authentication methods cannot be disabled. Instead of creating broken symlinks, you can actually specify this server-side in sshd_config (at least on CentOS 7):

  HostKey /etc/ssh/ssh_host_rsa_key

You can also force this on the client-side in ~/.ssh/config:

  HostKeyAlgorithms ssh-rsa

See man pages for defaults.

jamielinux

Submissions

Curious things I discovered about Ansible in Advent of Code

Show HN: A cross-platform wrapper for pyright that makes it less noisy

Show HN: Libvirt Networking Handbook

comments