Android kernel has the relevant kernel parameters disabled. It is entirely possible to run containers directly on android, but it requires enabled the relevant parameter (iirc no recompilation need, just a cmdline change). But this of course requires root.

Can they actually realistically do this? Nothing technical can stop a client from masquerading as another, and with the right level of dedication, this wouldn't be very hard to do. And since they're mostly targeting power users, seems like they're barking up the wrong tree. Have I missed something?

Realistically, they can likely prevent the majority of this sort of use. You're right that's it's impossible to prevent 100%, but they can likely stop most of it. Particularly because each user is linked with an account which has an extra high cost to the user if penalized. Abuse prevention is harder when you permit anonymous users. (Like OAI's battle against people turning the free logged out chatgpt.com into an API)

This can probably be upstreamed into podman. Podman already has supports using a VM using podman machine (uses different tech under the hood depending on the OS). This seems like it can be yet another backend for it.

That would be great

Mise supports lock files but also validates checksums when possible.

Fairly sure every single one has a repo level config that you can add these settings to. Others have pointed out the pnpm and npm, and I bunfig can also be repo level.

Probably again cancelled or significantly reduced in the near future when all the current investors inevitably cash out.

I dunno, you say you prefer Windows over macOS, but it sounds to me like you're fighting your OS.

MacOS has a lot of flaws, but at least I'm not fighting it. If I say to do something, it does it. It doesn't suddenly revert your decision.

My sentiment with windows (likely shared by most people here consciously using it) is that it's a good OS at heart somwhere. The core of it is very solid and has been for a while, and most of the crap parts that people complain about (see above) are "tacked on" to it and could fairly easily be removed/reverted if Microsoft wanted to (in fact they already have done, see IoT Enterprise LTSC and Windows Server), and it would still unmistakably be Windows.

I don't know much about MacOS but the same isn't really true of [desktop] Linux. Most of its flaws are not easily fixed in the same way and are much deeper architectural/social issues that require a lot of work to fix.

If by "conciously using it" means picking it over the alternatives and not using it while unconcious, then yes presumably that subset of people prefer it over the alternatives. That's pretty circular reasoning. Most people who actively choose to use linux also think that linux is a good os.

And I think most linux users would pretty strongly disagree that it's easier to fix windows, a user hostile, closed source operating system with far fewer options for every single user facing aspect of the OS than linux. You have that completely backwards.

> don't know much about MacOS but the same isn't really true of [desktop] Linux. Most of its flaws are not easily fixed in the same way and are much deeper architectural/social issues that require a lot of work to fix.

I'm not sure where you got this, but I've been a fulltime Linux user for near 2 decades, and I promise you almost everything is fixable. The biggest issues are drivers, but even then you're bound to find someone who has developed some drivers or if not, you can develop your own if you have the skill or pay someone if you don't.

I agree about Winndows, but increasingly feel the same way about macOS.

As for Linux, hard disagree, but only because I'm able to fix most anything that annoys me myself with enough elbow grease (same goes for Windows and macOS) except for application compatibility.

Then again, a lot of this comes down to the fact that all three have decent terminal applications, shells, tolerable programming interfaces, and the same choice of cross-platform browsers.

Mobile devices, on the other hand, are the real enemy.

Alternatively: you're not fighting your OS because you know you can't win, so you give up before even considering fight as an option.

Windows is super annoying to power users in large part because you know it can be beaten into submission with enough effort, but that effort is usually just not worth it.

Exactly! And this was a huge reason why I switched to Linux as my primary OS. For a while the only problem for me was gaming, but that's less of an issue now because of Valve but more so because I kinda stopped playing games.

Docker containers use cgroups and namespaces etc (the usual kernel level isolation)

Docker sandboxes use microvms (i.e. hardware level isolation)

Bubblewrap uses the same technology as containers

I am unsure about seatbelt.

You can use sponge for that.

Here's an easier to understand query for what you're trying to do (at least it's easier to understand for me):

    cat input.json | jq -r '(first | keys) as $cols | $cols, (.[] | [.[$cols[]]]) | @tsv'

That whole map and from entries throws it off. It's not a good use for what you're doing. tsv expects a bunch of arrays, whereas you're getting a bunch of objects (with the header also being one) and then converting them to arrays. That is an unnecessary step and makes it a little harder to understand.

Thanks for sharing, this is much better, though I actually think it is the perfect example to explain something that is brain-slippery about jq

look at $cols | $cols

my brain says hmm that's a typo, clearly they meant ; instead of | because nothing is getting piped, we just have two separate statements. Surely the assignment "exhausts the pipeline" and we're only passing null downstream

the pipelining has some implicit contextual stuff going on that I have to arrive at by trial and error each time since it doesn't fit in my worldview while I'm doing other shell stuff

I totally agree, it did take me a while to come to terms with the syntax of assigning variables specifically due to that pipe at the end. I guess sometimes we just have to know the quirks of the relevant tooling we use. I used to use PHP heavily in the 4 and 5 days, and kinda got used to all the quirks it had. So during reviews, I would pick up a lot of issues some of my colleagues did not.

Interestingly some things do use a semicolon in jq, specifically while, until, reduce and some others I can't remember right now.

Honestly both of those make me do the confused-dog-head-tilt thing. I'd go for something sexp based, perhaps with infix composition, map, and flatmap operators as sugar.