Skip to content

Instantly share code, notes, and snippets.

@dcarley
dcarley / README.md
Last active October 6, 2021 13:05
PROXY protocol spoof test

Verifying whether the following can be spoofed (source).

Network Load Balancers use proxy protocol version 2 to send additional connection information such as the source and destination. Proxy protocol version 2 provides a binary encoding of the proxy protocol header. The load balancer prepends a proxy protocol header to the TCP data. It does not discard or overwrite any existing data, including any proxy protocol headers sent by the client or any other proxies, load balancers, or servers in the network path. Therefore, it is possible to receive more than one proxy protocol header. Also, if there is another network path to your targets outside of your Network Load Balancer, the first proxy protocol header might not be the one from your Network Load Balancer.

@dcarley
dcarley / README.md
Created October 31, 2025 17:06
containerd "waitid: no child processes" reproduction

Reproduction for https://github.com/flox/product/issues/1088 when using exec.Command within a containerd shim.

Test 0: Baseline (no reaper components)
===============================================
Establishes baseline: normal exec.Command behavior

---------------------------------------
WITHOUT Setpgid
---------------------------------------

Open PRs in flox/flox

# Title Status Date
4143 chore(deps): bump claude-code-action 1.0.83→1.0.84 OPEN Apr 1
4140 feat(publish): Collect narinfo from local store for metadata-only publish OPEN Apr 1
4136 chore: cleanup Claude review workflow OPEN Mar 31
4135 fix: don't log FLOX_FLOXHUB_TOKEN OPEN Mar 31
4134 fix(buildenv): two-level priority for output collision resolution OPEN Mar 30
4131 chore: bump nixpkgs and rust toolchain OPEN Mar 30