I completely missed that user namespaces were added in 1.25. It will make homelabs much easier and safer with little effort.
Support user namespaces in pods (KEP-127)
User namespaces is a Linux-only feature that better isolates pods to prevent or mitigate several CVEs rated high/critical, including CVE-2024-21626, published in January 2024. In Kubernetes 1.30, support for user namespaces is migrating to beta and now supports pods with and without volumes, custom UID/GID ranges, and more!
https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/
Just not in Java…
I think you're biased against Java. Amazon was started in C/C++ and Java J2EE during times when to configure a webserver required writing like 300 lines of XML just to handle cookies, browser cache and a login page. Until recently BMW had their own JRE implementation. It's not a secret that simcards, including these in Tesla cars run JavaCard too, even government issues sim cards in EU have to run Java Card, not C++. Everything was always fine with Java until ECMA Script appeared and made people iterate on software versions faster. New programming languages and team organisation methodologies left some programming languages in the dark, but this included C# too. All are quickly catching up. If Java was so bad, it wouldn't be here with us today, like Perl.
There are two schools:
- the best stack is the one you know best
- the best stack is the one designed for the job
Remember that Google was written in Python and Java. Facebook in PHP. iOS in Objective-C. GitHub in Ruby on Rails.
After doing it for 15 years, I must be good at it and everything should be easy.
hidethepainharold.jpg
So while I'm myself struggling to fully understand what this is, it conceptually like it's a blockchain on syncthing, where even if you subscribe to a read only share, you can locally delete what you don't want to keep. So technically you could make bitorrent to behave like syncthing with search function for contacts you already know.
Omnia Turris
It really depends on where you set the limit on what ORM is, JOOQ is kind of a thing you're looking for.