<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for holyhandgrenade.org</title>
	<atom:link href="http://holyhandgrenade.org/blog/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://holyhandgrenade.org/blog</link>
	<description>System administration from the trenches.</description>
	<lastBuildDate>Wed, 27 Jan 2010 17:11:21 -0600</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on About by Sam</title>
		<link>http://holyhandgrenade.org/blog/about/comment-page-1/#comment-168</link>
		<dc:creator>Sam</dc:creator>
		<pubDate>Wed, 27 Jan 2010 17:11:21 +0000</pubDate>
		<guid isPermaLink="false">http://www-new.holyhandgrenade.org/wordpress/?page_id=2#comment-168</guid>
		<description>Hello Jeff. I&#039;m a systems engineer too. Cool blog.

Sam.</description>
		<content:encoded><![CDATA[<p>Hello Jeff. I&#8217;m a systems engineer too. Cool blog.</p>
<p>Sam.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on awesome WM Appreciation Post by John "Z-Bo" Zabroski</title>
		<link>http://holyhandgrenade.org/blog/2009/10/awesome-wm-appreciation-post/comment-page-1/#comment-139</link>
		<dc:creator>John "Z-Bo" Zabroski</dc:creator>
		<pubDate>Mon, 18 Jan 2010 23:35:23 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=270#comment-139</guid>
		<description>I looked up some paper history here.

http://portal.acm.org/citation.cfm?doid=24054.24056

Check out who one of the authors is.</description>
		<content:encoded><![CDATA[<p>I looked up some paper history here.</p>
<p><a href="http://portal.acm.org/citation.cfm?doid=24054.24056" rel="nofollow">http://portal.acm.org/citation.cfm?doid=24054.24056</a></p>
<p>Check out who one of the authors is.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Linux vs. Solaris packaging: it&#8217;s a philosophical thing by Jeff</title>
		<link>http://holyhandgrenade.org/blog/2009/12/linux-vs-solaris-packaging-its-a-philosophical-thing/comment-page-1/#comment-138</link>
		<dc:creator>Jeff</dc:creator>
		<pubDate>Thu, 14 Jan 2010 06:20:51 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=462#comment-138</guid>
		<description>Oh, wow, it feels like ages since I&#039;ve updated. Thanks for the comments.

I didn&#039;t mean for this to turn into too much of a discussion about Sun&#039;s packaging system in general; it&#039;s been covered before in much greater depth by people with much greater knowledge than I on all things Solaris. It was mostly intended to explain to Linux-centric people why Solaris&#039;s third-party package ecosystem is so bare-bones compared to Linux&#039;s, and why a lot of effort goes into building a full stack from source. Since nobody else is commenting, though, there&#039;s no reason to be afraid of a little derail. :)

SysV packaging is definitely showing its age, and you&#039;ll find few outside of the hardcore Sun faithful who actually try to defend it. IPS in OpenSolaris is still dog slow, much slower than any modern package manager ought to be, but I think it does address most of your concerns. Sun has a &lt;a href=&quot;http://dlc.sun.com/osol/docs/content/dev/IMGPACKAGESYS/gentextid-410.html&quot; rel=&quot;nofollow&quot;&gt;decent introduction to IPS packaging&lt;/a&gt; in their OpenSolaris docs. Also see the &lt;a href=&quot;http://dlc.sun.com/osol/docs/content/dev/IMGPACKAGESYS/gentextid-2535.html&quot; rel=&quot;nofollow&quot;&gt;command reference for pkg(1)&lt;/a&gt;, which has some other useful information in it.

Here&#039;s the nickel version:

IPS handles upgrading pretty seamlessly. Not only does it handle upgrades in the sane way expected of a modern package manager, but it also can take a full ZFS snapshot of your boot environment so you can roll back to a known-working package set without a lot of fuss. (This isn&#039;t hard using RHN Satellite or Spacewalk either, from the Red Hat side, but it takes a lot more plumbing and infrastructure and relies on your ability to downgrade packages cleanly.)

Checksums are handled well by &quot;pkg verify&quot;, as are other things that any other modern package manager could sanity-check, like permissions. OpenSolaris loses points by not having the output format easily parseable/scriptable like the output of &quot;rpm --verify&quot; but the functionality is in place and usable, at least.

Querying and listing packages is done through &quot;pkg contents&quot; and &quot;pkg search&quot;. These functions work identically on local and remote packages, which gives IPS a tiny leg up on its Linux counterparts.

It also manages dependencies pretty well -- that was more or less the entire point of bringing Ian Murdock on board with Sun&#039;s platform team. The lack of a regular Internet-oriented package manager like most Linux distros have had for a very long time is definitely something that&#039;s scared a lot of Linux users away from Solaris.

Of course, this means pretty much nothing to you if you&#039;re not running OpenSolaris, which takes some balls to do at this point. And, like any major change in an OS like Solaris, it introduces its own set of problems. Here&#039;s a quote from the pkg(5) manpage about package version numbers:

&lt;blockquote&gt;The first part is the component version.  For components tightly bound to OpenSolaris, this will usually be the value of &#039;uname -r&#039; for that version of OpenSolaris.  For a component with its own development lifecycle, this sequence will be the dotted release number, such as &#039;2.4.10&#039;.&lt;/blockquote&gt;

How very intuitive, Sun.</description>
		<content:encoded><![CDATA[<p>Oh, wow, it feels like ages since I&#8217;ve updated. Thanks for the comments.</p>
<p>I didn&#8217;t mean for this to turn into too much of a discussion about Sun&#8217;s packaging system in general; it&#8217;s been covered before in much greater depth by people with much greater knowledge than I on all things Solaris. It was mostly intended to explain to Linux-centric people why Solaris&#8217;s third-party package ecosystem is so bare-bones compared to Linux&#8217;s, and why a lot of effort goes into building a full stack from source. Since nobody else is commenting, though, there&#8217;s no reason to be afraid of a little derail. <img src='http://holyhandgrenade.org/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>SysV packaging is definitely showing its age, and you&#8217;ll find few outside of the hardcore Sun faithful who actually try to defend it. IPS in OpenSolaris is still dog slow, much slower than any modern package manager ought to be, but I think it does address most of your concerns. Sun has a <a href="http://dlc.sun.com/osol/docs/content/dev/IMGPACKAGESYS/gentextid-410.html" rel="nofollow">decent introduction to IPS packaging</a> in their OpenSolaris docs. Also see the <a href="http://dlc.sun.com/osol/docs/content/dev/IMGPACKAGESYS/gentextid-2535.html" rel="nofollow">command reference for pkg(1)</a>, which has some other useful information in it.</p>
<p>Here&#8217;s the nickel version:</p>
<p>IPS handles upgrading pretty seamlessly. Not only does it handle upgrades in the sane way expected of a modern package manager, but it also can take a full ZFS snapshot of your boot environment so you can roll back to a known-working package set without a lot of fuss. (This isn&#8217;t hard using RHN Satellite or Spacewalk either, from the Red Hat side, but it takes a lot more plumbing and infrastructure and relies on your ability to downgrade packages cleanly.)</p>
<p>Checksums are handled well by &#8220;pkg verify&#8221;, as are other things that any other modern package manager could sanity-check, like permissions. OpenSolaris loses points by not having the output format easily parseable/scriptable like the output of &#8220;rpm &#8211;verify&#8221; but the functionality is in place and usable, at least.</p>
<p>Querying and listing packages is done through &#8220;pkg contents&#8221; and &#8220;pkg search&#8221;. These functions work identically on local and remote packages, which gives IPS a tiny leg up on its Linux counterparts.</p>
<p>It also manages dependencies pretty well &#8212; that was more or less the entire point of bringing Ian Murdock on board with Sun&#8217;s platform team. The lack of a regular Internet-oriented package manager like most Linux distros have had for a very long time is definitely something that&#8217;s scared a lot of Linux users away from Solaris.</p>
<p>Of course, this means pretty much nothing to you if you&#8217;re not running OpenSolaris, which takes some balls to do at this point. And, like any major change in an OS like Solaris, it introduces its own set of problems. Here&#8217;s a quote from the pkg(5) manpage about package version numbers:</p>
<blockquote><p>The first part is the component version.  For components tightly bound to OpenSolaris, this will usually be the value of &#8216;uname -r&#8217; for that version of OpenSolaris.  For a component with its own development lifecycle, this sequence will be the dotted release number, such as &#8216;2.4.10&#8242;.</p></blockquote>
<p>How very intuitive, Sun.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Linux vs. Solaris packaging: it&#8217;s a philosophical thing by Chris Siebenmann</title>
		<link>http://holyhandgrenade.org/blog/2009/12/linux-vs-solaris-packaging-its-a-philosophical-thing/comment-page-1/#comment-130</link>
		<dc:creator>Chris Siebenmann</dc:creator>
		<pubDate>Mon, 11 Jan 2010 17:22:46 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=462#comment-130</guid>
		<description>I disagree with this view; I think that Solaris packaging is bad for reasons unrelated to how widely it&#039;s used (or how many packages Solaris includes by default). Instead, I dislike it because it works badly and doesn&#039;t give me the information I need. I wrote &lt;a href=&quot;http://utcc.utoronto.ca/~cks/space/blog/solaris/BadSolarisPackaging&quot; rel=&quot;nofollow&quot;&gt;a long entry&lt;/a&gt; to explain why in more depth.</description>
		<content:encoded><![CDATA[<p>I disagree with this view; I think that Solaris packaging is bad for reasons unrelated to how widely it&#8217;s used (or how many packages Solaris includes by default). Instead, I dislike it because it works badly and doesn&#8217;t give me the information I need. I wrote <a href="http://utcc.utoronto.ca/~cks/space/blog/solaris/BadSolarisPackaging" rel="nofollow">a long entry</a> to explain why in more depth.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on More on CentOS 5.3 to 5.4 by Jeff</title>
		<link>http://holyhandgrenade.org/blog/2009/11/more-on-centos-5-3-to-5-4/comment-page-1/#comment-50</link>
		<dc:creator>Jeff</dc:creator>
		<pubDate>Mon, 16 Nov 2009 04:41:15 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=366#comment-50</guid>
		<description>I&#039;ve found this to be the case with certain upgrades, but RHEL/CentOS&#039;s minor releases have been pretty good to me in this regard -- this is actually the first time in all the time I&#039;ve been administering CentOS systems that I&#039;ve been burned by something like this. Major releases are another story; I&#039;ve found those to be especially problematic even going from one Fedora release to the next (Fedora 8-&gt;9 on my build system was a particular nightmare that broke pretty much everything about the system). But again, it&#039;s mostly my own fault for missing the CentOS-specific release notes -- I didn&#039;t experience anything that couldn&#039;t have been avoided by finding the correct documentation.

I still plan to update in this way for minor releases and update packs, as my only damage has been minor, hasn&#039;t affected any user-facing aspects of a system and is much quicker than doing clean reinstalls for the majority of systems. However, I&#039;m absolutely not denigrating your approach: I still absolutely am keeping all of my configuration and data backups on hand when facing OS upgrades like this. I keep most systems managed by Puppet, all system configurations in revision control, and everything&#039;s ready to go when a colorful object of choice hits the fan.

As we move more towards a virtualized infrastructure, where we can easily stand up clones of virtual machines to test upgrades, I suspect a lot of these problems will go away. As it stands today, though, I&#039;m glad we have at least a basic release management framework in place and were able to catch these problems before they made their way onto any important systems.

In any case, this is certainly a big motivation for me to move forward with finishing my Spacewalk deployment. Yum has definitely presented us with certain major issues in the release management process.</description>
		<content:encoded><![CDATA[<p>I&#8217;ve found this to be the case with certain upgrades, but RHEL/CentOS&#8217;s minor releases have been pretty good to me in this regard &#8212; this is actually the first time in all the time I&#8217;ve been administering CentOS systems that I&#8217;ve been burned by something like this. Major releases are another story; I&#8217;ve found those to be especially problematic even going from one Fedora release to the next (Fedora 8->9 on my build system was a particular nightmare that broke pretty much everything about the system). But again, it&#8217;s mostly my own fault for missing the CentOS-specific release notes &#8212; I didn&#8217;t experience anything that couldn&#8217;t have been avoided by finding the correct documentation.</p>
<p>I still plan to update in this way for minor releases and update packs, as my only damage has been minor, hasn&#8217;t affected any user-facing aspects of a system and is much quicker than doing clean reinstalls for the majority of systems. However, I&#8217;m absolutely not denigrating your approach: I still absolutely am keeping all of my configuration and data backups on hand when facing OS upgrades like this. I keep most systems managed by Puppet, all system configurations in revision control, and everything&#8217;s ready to go when a colorful object of choice hits the fan.</p>
<p>As we move more towards a virtualized infrastructure, where we can easily stand up clones of virtual machines to test upgrades, I suspect a lot of these problems will go away. As it stands today, though, I&#8217;m glad we have at least a basic release management framework in place and were able to catch these problems before they made their way onto any important systems.</p>
<p>In any case, this is certainly a big motivation for me to move forward with finishing my Spacewalk deployment. Yum has definitely presented us with certain major issues in the release management process.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on More on CentOS 5.3 to 5.4 by Ryan Sears</title>
		<link>http://holyhandgrenade.org/blog/2009/11/more-on-centos-5-3-to-5-4/comment-page-1/#comment-49</link>
		<dc:creator>Ryan Sears</dc:creator>
		<pubDate>Sat, 14 Nov 2009 00:35:47 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=366#comment-49</guid>
		<description>Yeah, this is pretty much why I don&#039;t do upgrades en masse, its a LOT easier to just start fresh and move your settings from a backup. I can&#039;t really think of any time when I did a major upgrade and it ended well.</description>
		<content:encoded><![CDATA[<p>Yeah, this is pretty much why I don&#8217;t do upgrades en masse, its a LOT easier to just start fresh and move your settings from a backup. I can&#8217;t really think of any time when I did a major upgrade and it ended well.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on awesome WM Appreciation Post by Jeff</title>
		<link>http://holyhandgrenade.org/blog/2009/10/awesome-wm-appreciation-post/comment-page-1/#comment-43</link>
		<dc:creator>Jeff</dc:creator>
		<pubDate>Mon, 02 Nov 2009 19:53:09 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=270#comment-43</guid>
		<description>Hey, nice. I love it when I attract the attention of devs just by talking about things, even if it&#039;s only complaints about what an idiot I am. :)

It&#039;s perfectly possible that my issues were caused by hardware or drivers or any of the other myriad things that make X.org behave completely differently on very similar tasks, but one of the things that drove me nuts the last time I gave Xmonad a serious try was that resizing windows was really, really slow, while other window managers (even relatively heavy-weight WMs like KWin) didn&#039;t seem to have this trouble. This is entirely anecdotal, and may not reflect everyone&#039;s experiences -- it may not even be current information. I should update the post to reflect that my experiences with Xmonad are based on code I used around a year ago.

However, awesome does use XCB instead of Xlib, and this may translate into certain performance improvements.</description>
		<content:encoded><![CDATA[<p>Hey, nice. I love it when I attract the attention of devs just by talking about things, even if it&#8217;s only complaints about what an idiot I am. <img src='http://holyhandgrenade.org/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>It&#8217;s perfectly possible that my issues were caused by hardware or drivers or any of the other myriad things that make X.org behave completely differently on very similar tasks, but one of the things that drove me nuts the last time I gave Xmonad a serious try was that resizing windows was really, really slow, while other window managers (even relatively heavy-weight WMs like KWin) didn&#8217;t seem to have this trouble. This is entirely anecdotal, and may not reflect everyone&#8217;s experiences &#8212; it may not even be current information. I should update the post to reflect that my experiences with Xmonad are based on code I used around a year ago.</p>
<p>However, awesome does use XCB instead of Xlib, and this may translate into certain performance improvements.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Google&#8217;s Broken Hiring Process by Allen Taylor</title>
		<link>http://holyhandgrenade.org/blog/2009/10/googles-broken-hiring-process/comment-page-1/#comment-41</link>
		<dc:creator>Allen Taylor</dc:creator>
		<pubDate>Sat, 31 Oct 2009 21:06:19 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=280#comment-41</guid>
		<description>Nice writing.  You are on my RSS reader now so I can read more from you down the road.

Allen Taylor</description>
		<content:encoded><![CDATA[<p>Nice writing.  You are on my RSS reader now so I can read more from you down the road.</p>
<p>Allen Taylor</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on awesome WM Appreciation Post by Don Stewart</title>
		<link>http://holyhandgrenade.org/blog/2009/10/awesome-wm-appreciation-post/comment-page-1/#comment-40</link>
		<dc:creator>Don Stewart</dc:creator>
		<pubDate>Fri, 30 Oct 2009 04:55:48 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=270#comment-40</guid>
		<description>&gt; &quot;it seems to be a lot faster than Xmonad and other tiling WMs&quot;

This doesn&#039;t seem plausible, in my view. Xmonad uses O(1) operations for all key functions, and runs in constant space. We thought very hard about designing optimal data structures to keep the window manager footprint extremely light.

Perhaps it is just psychological...</description>
		<content:encoded><![CDATA[<p>&gt; &#8220;it seems to be a lot faster than Xmonad and other tiling WMs&#8221;</p>
<p>This doesn&#8217;t seem plausible, in my view. Xmonad uses O(1) operations for all key functions, and runs in constant space. We thought very hard about designing optimal data structures to keep the window manager footprint extremely light.</p>
<p>Perhaps it is just psychological&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on New Malware Re-Writes Online Bank Statements to Cover Fraud by Banking Details</title>
		<link>http://holyhandgrenade.org/blog/2009/10/malware-re-writes-your-bank-statements-to-cover-fraud/comment-page-1/#comment-39</link>
		<dc:creator>Banking Details</dc:creator>
		<pubDate>Tue, 20 Oct 2009 20:53:48 +0000</pubDate>
		<guid isPermaLink="false">http://holyhandgrenade.org/blog/?p=232#comment-39</guid>
		<description>Encrypting banking sessions occur within the browser, so that&#039;s where banking malware wants to be, before the banking session leaves the browser.</description>
		<content:encoded><![CDATA[<p>Encrypting banking sessions occur within the browser, so that&#8217;s where banking malware wants to be, before the banking session leaves the browser.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
