Remix.run Logo
ecshafer 5 hours ago

Come on. I am sure you don’t like DHH. But he’s always taken security seriously in Rails.

12985-1286 5 hours ago | parent | next [-]

Shopify forced him to be a vibe coder now. Omarchy is a vibe coding distribution.

In the AI world, security issues are just another marketing opportunity.

EDIT: Downvote all you want. He was anti-AI, got a board seat at Shopify and then became an AI influencer. Now additional money is rolling in to Omarchy from Lütke and Steinberger.

newspaper1 2 hours ago | parent [-]

It's really disturbing that there's a group of these CEO/investor types that are openly white nationalists, and they're joining forces. I'll never touch any of their products, and I hope they continue to expose themselves on social media.

2 hours ago | parent [-]
[deleted]
phoronixrly 5 hours ago | parent | prev [-]

As I said, podman requires effort and thought on the user's side, as the rootless part incurs complexity. I do not think that this aligns with the omakase mantra of omarchy. I do not think that DHH does not take security seriously. I think that Omarchy is not meant to sacrifice devex for security.

isityettime 5 hours ago | parent [-]

Rootless Podman (and rootless Docker for that matter) is not difficult to set up automatically. There is a little complexity involved, namely in configuring subuid and subgid mappings, but not much.

That said, I think Arch Linux itself has a culture that values the wrong kind of simplicity (implementation simplicity) that perversely leads to a failure to adequately grapple with inherent complexity. This leads to brittle implementations, "buyer beware" norms, "you should have run the notes", "this command should never be used", etc. Omarchy inherits all of that from Arch. It also, it seems, carried its own perverse notion of "simplicity".

phoronixrly 4 hours ago | parent [-]

I was not referring to the setup complexity. Setup is performed just once. I was referring to the runtime complexity that comes naturally from having to take into account non-root user permissions and lack thereof. These peculiarities are quite a low bar, but they are still a non-trivial hurdle in the way of devex.

I am a fedora/opensuse user and happily use podman with selinux.

isityettime 28 minutes ago | parent [-]

IME it's not too bad, but I see what you're saying. I guess we're mostly in agreement.