Albin Kerouanton akerouanton

The following instructions require Lucet, although they can be easily adapted to other WebAssembly runtimes.

Save the following script as /opt/lucet/bin/lucet-ondemand:

#! /bin/sh

wasm_file="$1"
if [ -n "$wasm_file" ]; then
  if od -x "$wasm_file" | head -n1 | grep -Fq '0000000 6100 6d73 0001'; then

How to keep your Meetups attractive

Summary of the Twitter discussion started by https://twitter.com/kaktusmimi/status/947250255275483137

How do you organize speakers, topics, venues

Boyan Yordanov @specter_bg: I mostly talk to people at our events and a couple others and try to convince them to give speaking a shot. Trough this year pretty much all our speakers were speaking for the first time. For the venue we partner with the local hackerspace.

Symfony 4 (Fabien Potentier)

Component flex qui va se charger de loader les bundles dont on aura besoin dans son projet (ex: Doctrine, Twig, SwiftMailer, ...) pour ne pas a se frapper l'ajout suppression des bundle/composant par défaut. Pas de notion de bundle pour l'application (on pourra toujours en faire, mais déconseillé). Va sortir d'ici 2 semaines, en même temps que les blogs post de @fabpot. D'après moi, une approche orrienté micro-services dans cette nouvelle version.

symfony/flex

Applied Functional Programming with Scala - Notes

1. Mastering Functions

A function is a mapping from one set, called a domain, to another set, called the codomain. A function associates every element in the domain with exactly one element in the codomain. In Scala, both domain and codomain are types.

val square : Int => Int = x => x * x

Self isolating binaries

This is a play proposal for a new wrapper around go build that would build your binary but wrap it in code that would prepare isolation around your binary on run.

A concept of this is in https://github.com/jfrazelle/binctr, in that it takes a docker image and embeds the contents into a final binary so you have a self-contained binary.

The binctr example is unnessesarily heavy for go binaries because all you need is a completely static binary.

Github : Signing commits using GPG (Ubuntu/Mac) 🔐

Do you have an Github account ? If not create one.
Install required tools
Latest Git Client
gpg tools

# Ubuntu
sudo apt-get install gpa seahorse
# MacOS with https://brew.sh/

NOTE: This is no longer an experiment! You can use the accessibility inspector in Chrome Devtools now, including a fantastic color contrast inspection tool. Read more: https://developers.google.com/web/updates/2018/01/devtools#a11y

Just like any good element inspector helps you debug styles, accessibility inspection in the browser can help you debug HTML and ARIA exposed for assistive technologies such as screen readers. There's a similar tool in Safari (and reportedly one in Edge) but I like the Chrome one best.

As an internal Chrome experiment, this tool differs from the Accessibility Developer Tools extension in that it has privileged Accessibility API access and reports more information as a result. You can still use the audit feature in the Chrome Accessibility Developer Tools, or you could use the aXe Chrome extension. :)

To enable the accessibility inspector in Chrome stable:

This is a copy/paste from an internal wiki on how we should use docker

This guide is to serve as an outline of internal best practices to using Docker. The idea is to give enough information to allow engineers to create containers for new stack components while minimizing the cleanup required to make them production ready.

Concepts

Before we get to the practices, it's important to understand WHY we are doing this. The key concepts we're concerned about with broad Docker usage are provenance, determinism, repeatability and auditability.

Provenance

Provenance refers to knowing WHERE something comes from. Generally with the end use of software, this is easy:

Maven artifacts are pulled from central

	// simplevm.c: demonstrates Hypervisor.Framework usage in Apple Silicon
	// Based on the work by @zhuowei
	// @imbushuo - Nov 2020

	// To build:
	// Prepare the entitlement with BOTH com.apple.security.hypervisor and com.apple.vm.networking WHEN SIP IS OFF
	// Prepare the entitlement com.apple.security.hypervisor and NO com.apple.vm.networking WHEN SIP IS ON
	// ^ Per @never_released, tested on 11.0.1, idk why
	// clang -o simplevm -O2 -framework Hypervisor -mmacosx-version-min=11.0 simplevm.c
	// codesign --entitlements simplevm.entitlements --force -s - simplevm

	### KERNEL TUNING ###

	# Increase size of file handles and inode cache
	fs.file-max = 2097152

	# Do less swapping
	vm.swappiness = 10
	vm.dirty_ratio = 60
	vm.dirty_background_ratio = 2