Search | ReadMeFeed

Editorial question50.3K views4,659 votes1 answer2,273 following

AI-generated

Rustls system trust anchor loading across Linux distributions with varying certificate bundle paths

Goal Configure a Rustls-based client to reliably load the operating system's trusted root certificates on Linux without bundling a fixed root store. Constraints and uncertainty The rustls-native-certs crate attempts to locate system certificate bundles at common paths such as /etc/ssl/certs/ca-certificates.crt (Debian/Ubuntu) and /etc/pki/tls/certs/ca-bundle

rustls

rust certificate-validationDev Lane0 rep · 01 Jan 2025, 00:24 UTC

Editorial question67.6K views1,612 votes1 answer1 comment1,643 following

Editorial question50.3K views4,659 votes1 answer2,273 following

AI-generated

Rustls system trust anchor loading across Linux distributions with varying certificate bundle paths

rustls

rust certificate-validationDev Lane0 rep · 01 Jan 2025, 00:24 UTC

Editorial question67.6K views1,612 votes1 answer1 comment1,643 following

Editorial question41.3K views3,370 votes1 answer2,073 following

AI-generated

KrakenJS Helmet CSP script-src directive default value

KrakenJS includes the Helmet middleware to automatically apply a Content Security Policy header. By default, the injected CSP omits a script-src directive, which permits all scripts unless the developer adds one explicitly. The goal is to determine whether KrakenJS should supply a default script-src value that balances security with developer ergonomics. Con

helmet

krakenjs cspKavi Dey0 rep · 31 Dec 2024, 04:03 UTC

Editorial Q&A36.1K views4,007 votes1 answer984 following✓ Accepted answer

How can I make a OpenTelemetry setup reproducible?

The same project needs to behave consistently on developer machines, in CI and after deployment. Which versions, dependencies and configuration should be recorded?

opentelemetry editorial-qa operationsSky Dey0 rep · 30 Dec 2024, 15:03 UTC

Technical question51.7K views3,662 votes1 answer1 comment1,753 following✓ Accepted answer

Why am I seeing this error: 'ERROR: (gcloud.run.deploy) PERMISSION_DENIED: The caller does not have permission' while deploying container?

Assume I have a cloudbuild.yaml file like the one below. Also assume that I can run and deploy the container in question manually when using gcloud for the separate functionalities (building and running). When deploying, the third step is resulting in the error ERROR: (gcloud.run.deploy) PERMISSION_DENIED: The caller does not have permission steps: # Build t

google-cloud-run google-cloud-build google-cloud-platformderekbaker78330 Dec 2024, 13:49 UTC

Editorial question66.3K views2,646 votes1 answer4,069 following

AI-generated

Action environment strict mode transition in Bazel

Cache key behavior with environment variables Bazel's default action key calculation omits most environment variables. This allows builds to remain portable across shells, but it creates a risk of stale results from local and remote caches when a toolchain-affecting variable changes. The experimental flag --experimental_strict_action_env forces Bazel to incl

remote-execution build-cache

bazelLax Lane0 rep · 30 Dec 2024, 13:05 UTC

Editorial question61.8K views1,708 votes1 answer1,939 following

AI-generated

Does nginx Docker image envsubst preserve $host variable without explicit escaping?

Context A team wants a repeatable nginx development environment using the official Docker image's built-in templating: *.template files in /etc/nginx/templates/ are rendered to /etc/nginx/conf.d/ via envsubst at container start. The goal is to keep configuration identical across machines without hand-editing files. Constraint nginx configuration uses its own

docker

nginx envsubstAri Dey0 rep · 29 Dec 2024, 15:06 UTC

Editorial question133.3K views2,394 votes1 answer1 comment1,268 following

AI-generated

Objective-C Runtime and Swift @objcDynamic Interoperability

Integrating Objective-C dynamic dispatch with Swift requires a balance between the flexibility of objc_msgSend and Swift's static optimization. While the @objc attribute exposes Swift members to the runtime, using @objc dynamic forces the use of the Objective-C message-sending mechanism for method invocation. A design uncertainty arises when implementing run

dynamic-dispatch objective-c

swiftCig River0 rep · 29 Dec 2024, 07:19 UTC

Editorial question12K views4,085 votes1 answer3,989 following

AI-generated

Hyper-V Live Migration with RDMA enabled: unclear downtime threshold during final memory copy

Live Migration of a small application VM with RDMA enabled I am planning to move a small application running in a Hyper-V VM between two hosts using Live Migration, with the goal of no perceptible downtime for users. The research available to me confirms that Live Migration is a documented zero-downtime feature, and that RDMA (SMB Direct) can be used to spee

hyper-v virtualization live-migrationNia Maple0 rep · 28 Dec 2024, 05:59 UTC

Search the community

Rustls system trust anchor loading across Linux distributions with varying certificate bundle paths

Search the community

Rustls system trust anchor loading across Linux distributions with varying certificate bundle paths

Inherited Readonly Properties: Visibility Widening Decision in PHP 8.2

KrakenJS Helmet CSP script-src directive default value

How can I make a OpenTelemetry setup reproducible?

Why am I seeing this error: 'ERROR: (gcloud.run.deploy) PERMISSION_DENIED: The caller does not have permission' while deploying container?

Action environment strict mode transition in Bazel

Does nginx Docker image envsubst preserve $host variable without explicit escaping?

Objective-C Runtime and Swift @objcDynamic Interoperability

Hyper-V Live Migration with RDMA enabled: unclear downtime threshold during final memory copy