7️⃣ Here's the 7th post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd

Sometimes it's useful to bind a specific service to a certain network interface – all of it, at once. With v260 there's a new knob for that: BindNetworkInterface= can be configured in service units, and will cause all sockets of the service to be bound to the specified network interface, without a chance to use any other.

This is particularly useful in VRF contexts, …

DNSSEC Negative Trust Anchors: No Good Compromises => learn more about them and our new policy.

https://quad9.net/news/blog/dnssec-ntas-no-good-compromises/

#infosec #DNSSEC #transparency #security #DNS

When will #systemd integrate a kernel so it doesn't need to depend on Linux anymore?

This toot came to be after I got to know that systemd is also an OpenContainerInfrastructure management software now.

How to do zero-downtime deploys using systemd.

systemd has a socket-activation feature that's associated with starting services on demand, often paired with shutting them down they are idle.

But today I confirmed they have a great value for always-on services-- zero-downtime deploys for web services!

What happens is that systemd owns the listening socket and never stops listening during the restart. Connections are queued and succeed when the service up.

#devops #systemd #webdev

TIL that:

<? this ?>
<! this !>
</ and this >

…all parse as HTML comments.

It hits a part of the parser the spec where the content is "reconsumed in the bogus comment state".

https://html.spec.whatwg.org/multipage/parsing.html#tag-open-state:bogus-comment-state:~:text=U%2B003F%20QUESTION%20MARK%20%28%3F%29

Relax 😎! GPG is not OpenPGP!

Yesterday, vulnerabilities were published https://gpg.fail but they don't affect #deltachat or other #chatmail clients because

A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times.

B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)

Please spread the word that #gpg is not #openpgp ... Thanks! #39c3

Attention #BeaconDB contributors!

#Neostumbler 2.0.0 is out, bringing the option to exclude Wifis based on their name (SSID). This is important to exclude mobile hotspots and other moving wifis, that would mess up results.

Also it allows us to respect the "optout" and "nomap" SSIDs, used to prevent scanning.

BeaconDB has the "Common Network Index", copy the contents of these files into the field in NeoStumbler:

https://codeberg.org/beacondb/common-network-index/src/branch/main/data

@[email protected] @beacondb