andreas - Network

No more excuses for me not to try out UV for my next Python project.(Yes, it's a bummer that we don't yet have any established...

No more excuses for me not to try out UV for my next Python project.

(Yes, it's a bummer that we don't yet have any established standard for dealing with Python lockfiles.)

https://github.blog/changelog/2025-03-13-dependabot-version-updates-now-support-uv-in-general-availability/

A while back I created a GitHub Action that would help me request short-lived SSH client certificates from Vault. Having then done a whole...

A while back I created a GitHub Action that would help me request short-lived SSH client certificates from Vault. Having then done a whole bunch of not-necessarily-needed tinkering I figured that I might as well now commit to a v1 version tag.

Using short-lived SSH client certificates is definitely the way to go if you're going to deploy directly to a a regular old-fashioned (virtual) server.

https://github.com/andreaso/vault-oidc-ssh-cert-action

I just got myself a pair of computer glasses, in addition to my regular glasses.Aside from the obvious benefit there's also the side...

I just got myself a pair of computer glasses, in addition to my regular glasses.

Aside from the obvious benefit there's also the side benefit that I now can reenact one particular scene from The IT Crowd.

https://www.youtube.com/watch?v=LNKocMiehZA

Hello Brussels!

Hello Brussels!

One of the primary reasons that I own a printer is so that I can print the occasional travel documents.Yes, this is mostly about me being...

One of the primary reasons that I own a printer is so that I can print the occasional travel documents.

Yes, this is mostly about me being old and appreciating the extra redundancy.

Still, some scanners really do appear to work more reliable with paper tickets than when confronted by smartphone screens.

Currently connected through the @mullvadnet VPN.Not primarily because I'm fully convinced about the privacy benefit. Right now it's...

Currently connected through the @mullvadnet VPN.

Not primarily because I'm fully convinced about the privacy benefit. Right now it's more that I'm curious about the browsing experience.

The first roadblock turned out to be not being able to access reddit. That did surprise me, given that I've rarely/ever had any issues with them blocking Tor exists.

Perhaps not surprisingly I now and then end up talking to people about using OIDC to authenticate their CI/CD jobs against their cloud...

Perhaps not surprisingly I now and then end up talking to people about using OIDC to authenticate their CI/CD jobs against their cloud provider(s). Given that I figured that it might just be helpful to put together a demo of what's happening under the hood.

https://github.com/andreaso/gha-oidc-e2e-demo

Almost impossible for me to listen to Princes Of The Universe or Who Wants To Live Forever without feeling the urge to go rewatch some...

Almost impossible for me to listen to Princes Of The Universe or Who Wants To Live Forever without feeling the urge to go rewatch some Highlander.

Still amazed that the producers of the first Highlander movie manged to get Queen to write and perform the soundtrack.

https://www.youtube.com/watch?v=VEJ8lpCQbyw

Super happy with my @frameworkcomputer laptop!Just wish that they hadn't decided to Fn-combine Insert and Delete on the same physical...

Super happy with my @frameworkcomputer laptop!

Just wish that they hadn't decided to Fn-combine Insert and Delete on the same physical key.

Turning back the clock is great! For example, it allows you to perform maintenance with (less than) zero amount of downtime!

Turning back the clock is great! For example, it allows you to perform maintenance with (less than) zero amount of downtime!

Being on the lazy side I recently migrated from a self-hosted Nextcloud instance to Hetzner's hosted version. So far I'm really...

Being on the lazy side I recently migrated from a self-hosted Nextcloud instance to Hetzner's hosted version. So far I'm really happy with it!

https://www.hetzner.com/storage/storage-share/

This is just a wonderfully absurd sketch all around. Also, the Negotiationist is such a fantastic job title alt. character...

This is just a wonderfully absurd sketch all around. Also, the Negotiationist is such a fantastic job title alt. character name.

https://www.youtube.com/watch?v=g7f-4M1PcUQ

Having recently rewatched both DS9 and B5 I can't help but to imagine Chief O'Brien fully approving of the way Commander Sinclair...

Having recently rewatched both DS9 and B5 I can't help but to imagine Chief O'Brien fully approving of the way Commander Sinclair ended up handling the invocation of the Rush Act.

Jo, lite så här jag känner jag hör svenska politiker prata om svenska...

Jo, lite så här jag känner jag hör svenska politiker prata om svenska värderingar....

https://www.dn.se/debatt/har-galler-svenska-lagar-inte-svenska-varderingar/

I kind of miss Icinga 1.Sure it had plenty of limitations, but for my personal hobby VPS environment it provided me pretty much exactly what...

I kind of miss Icinga 1.

Sure it had plenty of limitations, but for my personal hobby VPS environment it provided me pretty much exactly what I needed.

So, regarding the last few days' discussions regarding the Debian packaging of KeePassXC...Haven't individual Debian maintainers...

So, regarding the last few days' discussions regarding the Debian packaging of KeePassXC...

Haven't individual Debian maintainers always been both known and expected to apply a certain amount of independent judgement? Doesn't Debian have a long tradition splitting up packages? Surely you are expected to be able to deal with some unexpected changes when running testing/sid?

While I can certainly see how people might disagree I don't quite get the surprise/outrage.

https://github.com/keepassxreboot/keepassxc/issues/10725

Having a design discussion, for one of my pet projects, as the last meeting of the day wasn't very smart of me.Now my entire evening is...

Having a design discussion, for one of my pet projects, as the last meeting of the day wasn't very smart of me.

Now my entire evening is more or less gone, with my brain insisting on iterating on those ideas that came of the discussion.

https://xkcd.com/356/

Another "interesting" #GCP #IPv6 discovery is that their compute firewall API doesn't support you referring to ICMPv6 by name....

Another "interesting" #GCP #IPv6 discovery is that their compute firewall API doesn't support you referring to ICMPv6 by name. Instead you have to refer to IP protocol number 58.

https://www.googlecloudcommunity.com/gc/Infrastructure-Compute-Storage/IPv6-Firewall-Rule-for-ICMPv6/m-p/599013

Maybe I'm misunderstanding things, but it seems like Google Compute Instances handles #IPv6 addressing in a weird way.The good part is...

Maybe I'm misunderstanding things, but it seems like Google Compute Instances handles #IPv6 addressing in a weird way.

The good part is that GCP will assign a Subnet its own /64 range.

The complicated part is that each Compute Instance will dynamically get assigned a /96 from the Subnet range.

Hence before creation of an Instance it's impossible to know which /96 range it will have access to. Hence impossible to (re)create an Instance with a known static IPv6 address?

https://cloud.google.com/compute/docs/ip-addresses/configure-ipv6-address

Now that I know, I guess it's time to start removing datetime.strftime('%s') from my #Python...

Now that I know, I guess it's time to start removing datetime.strftime('%s') from my #Python code.

https://stackoverflow.com/questions/11743019/convert-python-datetime-to-epoch-with-strftime/11743262#11743262