today's leftovers

posted by Roy Schestowitz on Apr 24, 2023

• Norwegian translation support added to EasyOS

  Easy up to the current release, 5.2.2, does not support Norwegian "no" translation. Forum member 'tallboy' asked about this, and I replied here: [...]

• Kubernetes 1.27: Server Side Field Validation and OpenAPI V3 move to GA

  Before Kubernetes v1.8 (!), typos, mis-indentations or minor errors in YAMLs could have catastrophic consequences (e.g. a typo like forgetting the trailing s in replica: 1000 could cause an outage, because the value would be ignored and missing, forcing a reset of replicas back to 1). This was solved back then by fetching the OpenAPI v2 in kubectl and using it to verify that fields were correct and present before applying. Unfortunately, at that time, Custom Resource Definitions didn’t exist, and the code was written under that assumption. When CRDs were later introduced, the lack of flexibility in the validation code forced some hard decisions in the way CRDs exposed their schema, leaving us in a cycle of bad validation causing bad OpenAPI and vice-versa. With the new OpenAPI v3 and Server Field Validation being GA in 1.27, we’ve now solved both of these problems.

  Server Side Field Validation offers resource validation on create, update and patch requests to the apiserver and was added to Kubernetes in v1.25, beta in v1.26 and is now GA in v1.27. It provides all the functionality of kubectl validate on the server side.

  OpenAPI is a standard, language agnostic interface for discovering the set of operations and types that a Kubernetes cluster supports. OpenAPI V3 is the latest standard of the OpenAPI and is an improvement upon OpenAPI V2 which has been supported since Kubernetes 1.5. OpenAPI V3 support was added in Kubernetes in v1.23, moved to beta in v1.24 and is now GA in v1.27.

• Proxmox VE - TASK ERROR: CT is locked (snapshot-delete)

  To be able to start up this LXC container again, it will be necessary to remove the lock. By examining the configuration file for the LXC container with the id of 107, we can observe the lock status and an additional entry for the vzdump backup utility: [...]

• Federal office probes GMH network breach

  The “unauthorized access” that prompted the Guam Memorial Hospital to shut down its network in March is now being investigated by the U.S. Department of Health and Human Services, according to an acceptance letter addressed to a whistleblower who is only identified as “Leaky Leaks.”

  The acceptance letter, dated April 18, notified the whistleblower that the HHS Office for Civil Rights for the Pacific region was in receipt of the complaint.

  According to the letter, the complaint alleged that GMH “violated the federal Standards for Privacy of Individually Identifiable Health Information and/or the Security Standards for Protection of Electronic Protected Health information” during the course of its response to the electronic breach.

• Switch hacker Gary Bowser released from jail, will pay Nintendo 25-30% income ‘for the rest of his life’

  Gary Bowser, the hacking group member who was convicted for creating and selling circumvention devices enabling users to play illegal backups on Switch and 3DS, has been released from prison early.

  [...]

  In order to pay off Nintendo fully under this agreement, Bowser would have to earn at least $40 million before taxes. Given that Bowser is 53 years old, TorrentFreak suggests this will mean Bowser is unlikely to ever fully clear his debt and will likely be paying Nintendo for the rest of his life.

  In June 2022 a transcript of Bowser’s sentencing was received by Axios, in which Nintendo lawyer Ajay Singh reportedly said the sentencing was a “unique opportunity” to send a message about piracy.