Top all-time · #7438
Julian Andres Klode
Personal blog · blog.jak-linux.orgprogrammingsystems
Julian Andres Klode's personal blog at blog.jak-linux.org covers programming and systems. Since 2020, 10 different Hacker News readers have linked it 16 times, most often “The new APT 3.0 solver”. It is still writing: the last post was on 2026-07-03, and you can follow it by feed.
Most-linked posts?
- The new APT 3.0 solver3 people · 3 mentions · first linked 2024-05-14
- Migrating Away from Apt-Key2 people · 2 mentions · first linked 2021-06-21
- Apt 2.2 Released2 people · 2 mentions · first linked 2021-02-19
- The pandemic of incomplete OpenSSL error handling2 people · 2 mentions · first linked 2026-07-03
What Hacker News says?
This is a very contentious topic, you can see my initial take on this in https://blog.jak-linux.org/2023/10/10/a-case-for-different-u... The problem is that's not really true. i.e. consider you get postfixed pulled in by postfix | mail-transport-agent and the new distro release changes it to exim4 | mail-transport-agent as we picked a new default MTA. Does this mean we should, by default, replace your MTA and requir…
Comment linking /2023/10/10/a-case-for-different-upgrades/
on “The new APT 3.0 solver”Submitted The new APT 3.0 solver as a story · 193 points
HN discussion> So to me, all that sounds is nifty, but not especially impressive. Any devops team could write something to do the same in a couple of hours. If other distros don't have that, it could simply be because they don't need it. This isn't a complete description of openQA, but an illustrative snapshot. Btw, it looks like Fedora has adopted this tool as well (several years ago, hehe): https://openqa.fedoraproject.org/ An…
Comment linking /2024/05/14/solver3/
on “Aeon: OpenSUSE for Lazy Developers”Submitted Apt 2.0 as a story · 91 points
HN discussionI don't understand your point about the public key. The goal is to be able to verify all signatures; whether we trust a signature or not is configured inside APT by specifying a list of trusted primary keys. > # The algorithm is stored with the signature. > This is slightly less bad than above, but still bad Which algorithms are trusted is a client side decision. We do need the string to be able to parse the signatu…
Comment linking /2017/08/17/why-tuf-does-not-shine-for-apt-repositories/
on “Ditching OpenPGP, a new approach to signing APT repositories”Submitted Observations in Debian Dependency Solving as a story · 20 points
HN discussionRegular key rotation is a best practice that improves security. Even if the underlying ciphers have not changed, the value of a stolen key will decay when there is a planned sunset. In the lack of a rotation strategy, a stolen key is a gift that keeps on giving. OpenBSD introduced the signify command, and a 6-month key rotation, that will allow trust when the OS is downloaded over insecure channels (cleartext FTP an…
Comment linking /2021/06/20/migrating-away-apt-key/
on “Upgrade Your SSH Key to Ed25519 (2018)”Submitted Migrating Away from Apt-Key as a story · 11 points
HN discussionThe description you've given for apt just sounds almost exactly like SAT, a problem that's very efficiently approximated. That's exactly how the --solver 3.0 flag on recent apt versions works [0]. [0] https://blog.jak-linux.org/2024/05/14/solver3/
Comment linking /2024/05/14/solver3/
on “NP-Overrated”Submitted A SomewhatMaxSAT Solver as a story · 9 points
HN discussionSubmitted Apt Z3 Solver Basics as a story · 3 points
HN discussionSubmitted The pandemic of incomplete OpenSSL error handling as a story · 2 points
HN discussionSubmitted The pandemic of incomplete OpenSSL error handling as a story · 1 points
HN discussionSubmitted Packaging: Sound Removals as a story · 1 points
HN discussionSubmitted Apt 2.2 Released as a story · 1 points
HN discussionSubmitted Apt 2.2 Released as a story · 1 points
HN discussion
