Patrick Schratz

Patrick Schratz

@pat-dev.bsky.social

DevOps, Sysadmin, Data Science. Ansible, Golang, Rust, R #automateallthethings Personal: https://pat-s.me Business: https://devxy.io

46 followers13 following55 posts

Submitted an r-core patch that modernizes the default HTTP User Agent of the R interpreter so dynamic lookups of repositories can be applied natively without a custom UA patch

Crow CI v5.5.0 is out Pipelines can now be written in Jsonnet alongside YAML, and logs can be stored on any S3-compatible backend. The admin panel gained automatic Docker cleanup for orphaned containers and networks, and trusted PRs can be permanently approved to skip the gate. (1/2)

codefloe.comv5.5.0 - crowci/crow### Features - link sidebar version to Crow project page (#800) (3e7ad7e) - add Docker stale container/network/volume cleanup (#798) (fa0e638) - add Jsonnet support for pipeline configurations (#783) (d27259c) - add S3-compatible object storage backend for pipeline logs (#795) (7ebc1bc) - add 'a...

Just released v5 of #crowci - a hard-fork of #woodpecker Many hours of work went into this new release, which looks and (almost) feels like an entirely new application! Besides a fully refactored UI, docs were migrated to #astro #starlight (crowci.dev).

View full thread

- Global cron/secrets/registry views - Autoscaler UI integration - New metrics panel with both table and charts view - Support for multiple UI themes - Auto-follow steps within a workflow as they proceed - Conditions within "Deployment" runs (environment, task) actually take effect now

Just released v5 of #crowci - a hard-fork of #woodpecker Many hours of work went into this new release, which looks and (almost) feels like an entirely new application! Besides a fully refactored UI, docs were migrated to #astro #starlight (crowci.dev).

The new version includes many bugfixes and QOL improvements, which you might have come across in older versions (or in Woodpecker): - Restarting failed pipelines resources metadata, so you can fix your secret conditions and actually rerun a workflow - Bulk-delete for cron, secrets, registries

#matrix folks running #dendrite : If you want to enable sliding sync (MSC4186) in your instance (which enables you to use Element X), have a look at this issue and the linked PR: github.com/element-hq/d... Feedback and general contributions are welcome/needed to keep Dendrite alive!

github.comEmbedded / Support sliding sync /syncv3 · Issue #3236 · element-hq/dendriteThis issue was originally created by @genofire at matrix-org/dendrite#3236. Description: We are able to configure "well-know" yet, since #3039 . But it would be nice, that dendrite support sliding ...

PSA: #rstats Posit PM binaries for spatial packages (sf, terra, etc.) on RHEL9/Rocky9/Alma9 are broken right now after a major bump from Proj8 to Proj9 in the Appstream repo lately. (1/2)

Patrick Schratz reposted

#cve #security I need advice in how to act in the following case: A medium-big software vendor using #golang claims that the reported CVEs by #trivy and MS defender on their statically linked binaries are false-positives. Only #snyk would give a "correct" result.

They are not willing to share their go.mod file to verify they are not using package version XY in them. I am somewhat skeptical about this argument. What are my best chances to find a verifiable proof to this (other than attempting to exploit the vuln?)

Are trivy and MS Defender known for false-positives in such cases? I am in a weird spot where multiple scanners flag (multiple) binaries, the company says "nothing there, error on your (scanner) side" and I need to report to the sec team with 2:1 scanners in favor of the vuln being present.

Deployed #harbor container registry lately. While it has a lot of features and it is great to have a self-hostable alternative to the big SaaS options, the lack of love for details, especially in the UI, is somewhat insane.

On top, there is no #arm64 image variant in 2025, and the related discussions around that (6+ years) have quite some popcorn potential. Especially with the fact that the project is built with #golang and building multi-arch images there is super easy.

Trying for weeks to find a name for a new project incl. a com domain. Almost impossible these days, many domains are parked without being used. Likely in the hope to be sold to some that start with a large budget 🫠 ICANN should enforce the use within time X or drop the ownership again, IMO.

That being said: if one has a catchy name for a new #Git provider (like GH, GL) that is new yet reserved (and doesn't have 'git' in it), feel free to drop it here 😄 (when I'll use it, I'll surely buy you a ☕ - or two, or three...)

#zed editor (finally) added a visual #git integration. Slick and well done. It might be time to fully switch from #vscode and save a lot of battery (even though Zed sometimes also goes crazy there).

TIL: one can define dedicated connections for read and write operations for DBs. This allows distributing read-only queries among all replicas. Prob. late to the game but a game changer for traffic handling in (my) apps. #postgres #db #golang

View full thread

(Disclaimer: I've been a Woodpecker CI maintainer for many years and decided to branch off due to unreasonable internal conflicts; processes, governance, workflows and overall organization. I will continue to contribute to the WP ecosystem, yet my main efforts will go into Crow.)

Crow shines due to being forge-agnostic, i.e. it can be used together with GH, GL, BB, Gitea, and Forgejo in the same way. It is written in Go with a Vue frontend, and needs only ~ 150 MB in runtime. It works with Docker and Kubernetes (Podman not yet) and also comes with an optional autoscaler.

I am not entirely sure yet where Crow will be heading, i.e. whether it will become my own personal fork of Woodpecker in which nobody is interested in or if a community will form around it. Let's see :)

You are up to date.