Clamshell: 2021-05-08

Java Support Roadmap

This is a very sad announcement to me: Oracle plans to extend Java 8 support and give “Extended Support” until 2030 December (practically till 2031), see: Java Support Roadmap. I have never really understood why can’t we just leave Java 8 alone and let it enjoy its retirement. Just for the comparison: Java 11 is supported till 2026 September while Java 17 should retire in 2029 September.

Java Pub House - Episode 96. Micrometer

As you might know, I’m a Micrometer maintainer, the Java Pub House folks talked about Micrometer this month:

University duo thought it would be cool to sneak bad code into Linux as an experiment

Computer scientists at the University of Minnesota theorized they could sneak vulnerabilities into open-source software – but when they tried subverting the Linux kernel, it backfired spectacularly.

See the research paper

Linux kernel developers do not like being experimented on, we have enough real work to do: https://t.co/vWvtxjt7A5
— Greg K-H (@gregkh) April 21, 2021

Write a Good Dockerfile in 19 ‘Easy’ Steps

If you write your own Dockerfile(s), please read this article: Write a Good Dockerfile in 19 ‘Easy’ Steps, this: Write a Good Dockerfile in 0 Steps, watch this:

and please do not write Dockerfiles anymore. :)

CodeCov Security Breach

On Thursday, April 1st, CodeCov found out that someone had gained unauthorized access to their Bash Uploader script and modified it. The actor gained access because of an error in Codecov’s Docker image creation process that allowed the actor to extract the credential required to modify the Bash Uploader script. See the announcement for the details.

Crypto miners are killing free CI

As the market capitalization of crypto currencies grows, it’s becoming profitable for bad actors to make a full time job of attacking the free tiers of PaaS providers, read more Crypto miners are killing free CI.

WebAssembly Summit

See the whole YouTube playlist.

Fig

Fig adds VSCode-style autocomplete to your existing Terminal.

Starship

Starship minimal, fast, and customizable cross-shell prompt.

skopeo

skopeo is a command line utility that can perform various operations on container images and image repositories. It can work with OCI images as well as Docker images.

readme.so

readme.so is a simple editor allows you to quickly add and customize the sections you need for your project’s readme.