Alerting on high level 'user stories' failing doesn't work in all setups

One of the things I've heard more than once about monitoring andalerts is that you should focus your testing and alerts on whetheror not people can do things on your systems. This is sometimesdescribed as alerting on symptoms not causes, or focusing youralerting around monitoring 'user stories' or 'user journeys' to seeif they work. Approached from a (unit) testing mindset, you couldsay that you want to focus on integration or functional tests, suchas 'can we send a mail to


The technical merits of Wayland are mostly irrelevant

Today I read Wayland breaks your bad software ( via ),which is in large part an inventory of how Wayland is technicallysuperior to X. I don't particularly disagree with Wayland's generaltechnical merits and improvements, but at this point I think thatthey are mostly irrelevant. As such, I don't think that talkingabout them will do much to shift more people to Wayland.

(Of course, people have other reasons to talk about Wayland'stechnical merits. But a certain amount of


Email anti-spam (and really all anti-spam) is all heuristics now

On the Fediverse, I noted something :

This is my sad face when Spamhaus putslists.ubuntu.com (185.125.189.65) in the SBL CSS . Something went wrong here. Well,several things, starting with Cantor & Siegel .

Back in the days, one of the things some people said about DNSblocklists in general and sometimes Spamhaus in particular was thatthey were opaque, capricious, and didn't actually validate whatthey were putting in their


Experiencing the increase in web bandwidth usage for myself

Recently, for reasons outside the scope of this entry ( cf ), I found myselfusing tethered cellular Internet at home instead of my regular DSLInternet. In many parts of the West this wouldn't be much of aproblem, but in Canada our cellular Internet plans are all what youwould politely call 'cramped' in terms of monthly transfer limits,and needing to use cellular Internet on a regular basis for whatturned out to be more than two weeks really made me watch my usagenervously.

(I


Link: quoting strings and breaking strings across multiple lines in YAML

This StackOverflow answer ( alternate link )is an excellent, readable, all in one place answer to the twinquestions of how you quote strings in YAML and how you break themacross multiple lines. I learned something new about quotingstrings from reading it ,and I'm definitely going to want this link for future reference the nexttime I have something complicated to put in YAML. I'm also probablygoing to use '...' quoting more now that I know how simple it is toquote any


Go 1.22's (likely) new reflect.TypeFor() generic function

I'm always interested to see what the Go developers are doing withgeneric types in the standard library. One such development I'venoticed recently is a new generic function in the 'reflect' package, reflect.TypeFor() ;this will likely appear as part of Go 1.22. What TypeFor() does isrelatively straightforward; it returns the reflect.Type of its type, which you canthen use either for further reflection or to compare it to someother type (which you will


YAML is an okay enough configuration file format

Ever since we set up Prometheus ,I've had to deal with everyone's favorite configuration syntax tohate, YAML . Although YAMLisn't universal in the Prometheus and Grafana ecosystem, it's prettypervasive and many components and things you want to use areconfigured using it as the configuration syntax, so I've had towrite and read plenty of it. While I have my issues with YAML, overtime I've come to feel that it's an okay enough syntax and that


Linux NFS v4 idmapd domain handling and server/client agreement

As mentioned in the nfsidmap(5) manual page,NFS v4 represents UIDs and GIDs as 'id@domain' strings in contextslike stat(2) results and thus, for example, 'ls -l' output (thiswas explained to me in a comment on this entry ).If you want your NFS v4 mounts to look like your NFS v3 mounts andwork transparently, the server and the client need to agree on thedomain, although the exact domain probably doesn't matter


Enabling NFS v4 on an Ubuntu 22.04 fileserver (instead of just NFS v3)

In Ubuntu 22.04 and other modern Linux distributions, the way youprevent your fileservers from doing NFS v4 is to setsome options in /etc/nfs.conf . The defaultis to support NFS v4, so you need to change that:

[nfsd]vers4=nvers4.0=nvers4.1=nvers4.2=n

In theory, rpc.nfsd(8) says thatsetting all of these is overkill and all you need is


One challenge in reducing TLS certificate lifetimes down to 90 days

Back in March, the Chrome team said that they wanted to reducethe maximum TLS certificate duration down to 90 days (because I'm not always completely in touch with the TLS ecology,I only found out about this recently). In general I'm in favour ofshort TLS certificate lifetimes and in automation for TLS certificate renewalsand deployment, so you might expect me to be all in favour of this.But I actually think that this proposal would cause real problemsand get significant pushback from people.