A while ago (like ~10 years ago) VMWare workstation, or some of the things virtualbox graphics drivers did, seemed to be the only reasonable ways to run a virtualised desktop with 3d or at more than 5fps. But these days virtio and spice seems to work just fine.
Check out Mars Guy https://youtube.com/@marsguy?si=AFAci3mConZv1L5- Dr. Steve Ruff. Excellent videos from an expert, but one terrific thing is the use of common objects (like mars guy cutout) that gives you some better perspective on the images.
Most of these CI jobs do things like apply your proposed change, deploy the service, then connect up a headless client and take screenshots of the results so you can confirm the correct behaviour of your change; e.g. http://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b62... is from a job that was modifying the gita deployment.
Humans approve changes for merge with Zuul, but Zuul commits the code. When Zuul merges the change, another set of jobs will push things to the production hosts automatically. There is a talk on the overall process at https://www.youtube.com/watch?v=apLHQ4DkIHU
There are obviously bastion hosts and private components to the production deployment, but as much as practical is completely open. There have been contributors with no special access that have developed the deployment of infrastructure services and admins helped only at the end committing some secrets and providing production hardware resources. More commonly, people who have CI issues can jump in and fix their own problems, especially relating to things specific to them (e.g. mirror setup on CI nodes, software versions used, etc.)
One cool thing is that the Zuul jobs publish their production deployment logs in public, but encrypted (these might contain secrets, so are not made open by default). If you work on a particular system, you can request to commit your public key to the service you like and access all the deployment logs. For example, say you are interested in maintaining codesearch.opendev.org. The "infra-prod-codesearch" job deploys changes relating to this service. You can look at all the jobs at https://zuul.opendev.org/t/openstack/builds?job_name=infra-p..., and every job has an artifact that lets you download the logs; e.g. https://zuul.opendev.org/t/openstack/build/c76ec695d19a4e9e9.... Details are at https://docs.opendev.org/opendev/system-config/latest/open-i...
Wikimedia is the only other platform I've seen with a comparable commitment to open infrastructure (unsurprisingly there has been collaboration between the two over the years)
One interesting tidbit about "My Favorite Things" is that it came out several years before the movie [1]. So it was a Broadway hit, but not yet at the universally-known level the movie propelled it to.
The reverse engineering is certainly interesting, but the article headline seems like a bit of a beat-up since the app has a built in checker where you can scan the QR code shown and validate the details independently (the article does say this, at the end). It seems if you actually want to check a license this is better than having to identify if a physical card is a forgery.
I am dating myself but I'm old enough to have watched the Simpsons episode where this word was invented in its first airing. Maybe it is a word now, I mean it's no more or less ridiculous than other words, which somebody just made up at some point too.
I feel like title doesn't really focus on the specific behaviour change (not operating in a non-owned directories) that will be affecting a lot of CI/CD, which is what I was interesting in seeing discussion on.
If, like me, your knowledge of Constantinople is limited to the They Might Be Giants song, an excellent light-ish read (as much as 100s of years of Byzantine, as in the ridiculously complex, history can be) is Ghost Empire by Richard Fidler https://en.m.wikipedia.org/wiki/Ghost_Empire_(book)
In Australia, it's not just little side roads that run by school entrances that have this rule; the school zone thing applies even on fairly major free-flowing roads. Two examples I can think of are
As the usual speed limit is quite a bit higher at 70km/h, driving at 40km/h (25mph) outside these times would make you, at best, a rather annoying obstacle to surrounding traffic.
As the parent poster well knows (as they invented it) the trick here is that you write your jobs to install from a checkout the CI system does for you.
is really nice practical example. What it does isn't even really that important; but it runs a simulation of deploying production code in OpenDev. This is a "devel" job, we deliberately test any changes against all the latest HEADs of the master/main/development branches of projects we use. This is a non-voting job -- a notice that what you're introducing might be fine now, but there is trouble brewing when our dependencies release their next version. Sometimes that's fine and a known issue, or upstream is broken, and other times it's something totally unique and needs to be fixed (this is why, despite AI being able to write code for you, so far the implications of using that code still need a human in the loop :)
The "required-projects" in the job definition tells Zuul what repositories this test needs.
You can clearly see how it handles various projects having "devel", "main" or "master" branches to pull from to get their latest versions.
In the "vars" section you can see we're setting variables that get passed to the job roles flagging "this is the devel job, don't install the latest release but use the source Zuul will checkout for you from here".
The amazing thing? If I make a change and this job fails, I may debug it and find that it wasn't actually my fault, but something in upstream Ansible committed recently. I can propose the fix upstream. They do all their CI, and that's fine. But I now put in my change comment
and magically Zuul will recognise that I want to apply that pull request to the Ansible tree in testing and set it up for me (as noted, Zuul can do this for all sorts of systems, not just github). Additionally, Zuul will not merge the change until the dependency is satisfied -- I can NOT commit broken code!
In my help desk days I took a call from an irate person ranting about how we were telling her to "get a male sex change". Eventually I figured out she had become upset with "msexchange" showing up in the address!
In a big picture sense they've managed to reverse engineer this from a message of "quit" (i.e. do not ingest anything, which is what basically all health-based quit campaigns are about) to "stop smoking" where their IQOS system, which uses non-combustable tobacco-in-a-cylindrical-package-with-a-filter tip "HeatSticks" is "not smoking".
John Safran has just released a book Puff Piece about the incredible way Philip Morris has rebranded as a "health enterprise" and released the "heatstick" with their "vaping" IQOS platform (quotes are intentional, because as the books shows, words mean nothing!)
NIDA (Australia's, and one of the world's best acting schools) actually run a course "Influential Women" [1] that focuses on vocal presence for women in corporate environments.
In the demo video on https://openai.com/blog/openai-codex/#spacegame it seems like it goes and does an image search for a picture of an asteroid, and them embeds without attribution a direct link to a image hosted on "d.newsweek.com". Not sure I'd call that a resounding example of generating good code...