Hey now, some of us have standards.

We have shitty python scripts

Cuboids are prisms. Specially, they’re rectangular prisms

Fair enough, I didn’t consider compute resources

The actual length of the password isn’t the problem. If they were “doing stuff right” then it would make no difference to them whether the password was 20 characters or 200, because once it was hashed both would be stored in the same amount of space.

The fact that they’ve specified a limit is strong evidence that they’renot doing it right

Because you might accidentally do something which breaks the system, or you might run a program which does something malicious without your knowledge.

By gating dangerous (or protected for any other reason) commands behind sudo, you create a barrier which is difficult to accidentally cross

Just one padlock is enough, but you can use up to 6.

You need all the locks removed before it’ll open, so you don’t need to count on someone to carefully count everyone back in. You just make sure that each person uses their own lock

Also, it’s probably possible to fix the partition so that it’s as big as it used to be. It’s likely that some of your data is corrupted already, but the repartitioning won’t have erased the old data except here or there where it’s written things like new file tables in space it now considers unused

What they’re suggesting is to back up the whole disk, rather than any single partition. Anything you do to the partition to try and recover it has the potential to make a rescuable situation hopeless. If you have a copy of the exact state of every single bit on the drive, then you can try and fix it safe in the knowledge that you can always get back to exactly where you are now if you make it worse

I find it makes my life easier, personally, because I can set up and tear down environments I’m playing with easily.

As for your user & permissions concern, are you aware that docker these days can be configured to map “root” in the container to a different user? Personally I prefer to use podman though, which doesn’t have that problem to begin with

The satellite uplinks these devices use is very bandwidth limited, and quite expensive. I can assure you that it’s not routinely sending anything without telling you.

Source: worked in satellite comms

Podman supports docker compose just fine. You have to run it as a service, so that it can expose a socket like docker does, but it supports doing exactly that

Because a container is only as isolated from the host as you want it to be.

Suppose you run a container and mount the entire filesystem into it. If that container is running as root, it can then read and write anything it likes (including password databases and /etc/sudo)

Which is particularly surprising from a French company

That’s not fair. They’re complaining that they don’t like it, and that they want to be able to turn it off. They didn’t say it shouldn’t exist