jb… a weblog by Jonathan Buys

Serverless Jekyll Hosting on AWS

July 7, 2017

This is a bit silly, I’ll be the first to admit. The contraption I’ve built to host this site is clearly unnecessary, especially when I could host the site on Github for free, with very little effort, but I was curious, so down the rabbit hole I went.

I thought it would be interesting to host my site on S3. The site is entirely static, no database back end or dynamic programming required to generate the site, it’s just HTML, CSS, and Javascript. I also wanted to understand the AWS CodeBuild service, and how I might be able to use it for other projects.

There are four components of this system: Github, which hosts the code for the state. The domain name is registered and managed through Route53, where I’ve configured an “A” record as an alias to point at the S3 bucket which hosts the site. Finally, CodeBuild is the glue which pulls the code from Github, runs jekyll build, and pushes the site to S3.

CodeBuild works by starting a Docker container and pulling the repository down. It then looks for a file named buildspec.yml which contains the instructions to build the project. This file contains arbitrary Linux commands, whatever you need to build your code. Mine looks something like this:

version: 0.2

env:
  variables:
SITEBUILD: "yes"
phases:
  install:
commands:
apt-get update -y
  pre_build:
commands:
gem install bundler
    bundle install
  build:
commands:
echo Build started on date
    bundle exec jekyll build
    aws s3 sync _site/ s3://jonathanbuys.com
  post_build:
commands:
echo Build completed on date

The interesting thing about this system is that I could replace Jekyll with Hugo, Hakyll, or any other static site generator, even my own scripts, and the system would stay the same. I’d just need to update buildspec.yml with the new commands to install the right tools and build the site. Hosting costs so far have been pennies, my cost this month might reach $1.27, and for the past couple months the cost has been below one dollar.

I’ve been considering making this system more user friendly and monetizing it somehow. There’s a business model to be had in here somewhere, if I care to pursue it. Even though blogging in general appears to be in somewhat of a decline, publishing platforms will always be needed.


Recommending a New Mac

May 24, 2017

I got an email from my mom the other day asking me for a recommendation on a new Mac. The first question I asked was what her budget was like. She said she’d like to keep it under a grand, which right away narrowed the field quite a bit. Next I asked what she would be using the machine for, to which she replied with the standard home use cases of “income taxes, email, scanning, internet, etc”, as well as printing to a Brother ink jet.

At first glance, it would seem like she would be the perfect candidate for an iPad. Modest computing needs, tight budget, and she doesn’t want junk. Or, in her words, “I hate slow computers but don’t need top of the line either.” I considered steering her towards an iPad, but that first item in the list of things she uses a computer for gave me pause, “income taxes”. I don’t know exactly what software she uses to do taxes, but I started imagining scenarios where she would run up against the edges of what the iPad, or more specifically, iOS, can do. Would she need to download and import files from banks? Would she need to read files off a USB drive? She’s into wildlife photography in Montana, how would she get the photos on the iPad?1 My mom’s no slouch, but she’s not Federico Viticci either. Pushing the boundaries of iOS is not what she cares to be spending her time doing.

I imagine Mom just wants to use a computer like she’s been doing for the past thirty years. Given the budget, and after eliminating the iPad from the equation, I briefly considered the desktop options. Of course, all of those were thrown out almost immediately. The iMacs are too expensive, the Mac Mini is too slow, and the Mac Pro, uh, no. That leads us to the laptop line. The MacBook Adorable was considered, then eliminated for lack of ports and high price. The new MacBook Pro also suffers from a lack of standard ports and a price tag that’s far too high. That leaves us with the venerable MacBook Air.

The Air has been Apple’s best laptop, and possibly best computer period, for years. While the MacBook Pro is the workhorse of the lineup, the Air’s svelte styling and weight paired with an affordable price tag to make an extremely compelling offer. While the MacBook Adorbs is beautiful and portable, Apple is pushing the envelope with the single port, and consumers are footing the bill for the new technology with a higher price. While the Air is plenty fast enough for all but the most demanding tasks, I’ve heard more than one user complain that the mobile chip in the MacBook Meh is sluggish. Jony’s styling doesn’t win out over performance with my mom.

In the end, I found a 13” Air with 8GB RAM, 128GB SSD, and an Intel i5 for $850 on Apple’s refurbished site. I think Mom will be happy with this machine for many years to come.

Next, my daughter and I are going in on a Mac for her to take to college. That’s an entirely different set of requirements and a different use case, one that I’ll follow up with here, as soon as we decide what to get.

  1. Yes, I’m aware of the dongle. It seems like a wonky workaround. 


My Next Mac

May 16, 2017

So, yesterday I cleared off my desk and tried to work with nothing but my MacBook again. No standing desk, no external monitor. It looked great, but honestly, it felt terrible. I wound up hunched over the desk staring down at the screen. After an hour or so of this I decided, yet again, that this style of work is just not appropriate for me.

This leads me to a few interesting conclusions when considering what to buy for my next Mac. For one, I find a larger screen much easier to work with. The smaller screen is fine for when I’m loafing on the couch or traveling, but for day-to-day work it just makes getting things done harder. Secondly, the screen needs to be lifted to an ergonomically appropriate height. Photos online of beautiful desks with a single MacBook Adorable, a notebook, and a cup of coffee are nice, but I can’t see how anyone gets any serious work done on the computer in that environment. I always assume that whoever works that way doesn’t spend the majority of their day staring at the screen like I do.

So what’s next for me? I’ve been toying with the idea of only using an iPad Pro, and while I think I could work on it just fine, the overall experience would be ergonomically strenuous, and the workflows frustrating. The iPad shows promise, but until I can hook it up to an external keyboard, monitor, and touchpad, it’s not for me, not yet.

I love the look of the MacBook, but I just can’t work with it. I could leave it plugged into my external monitor all day, but there are a host of issues with that too. My monitor, a 24” Dell 4K, looks great, but it doesn’t have a built-in speaker or iSight camera like the old Apple Thunderbolt Display I was used to working with. The resolution is good for staring at text all day, but every time someone I work with wants to do a video conference or something similar I’ve got to either fish out my USB webcam or unplug the laptop. I could leave the laptop open to the side of the display, but I like having a single monitor to concentrate on.

Then there’s the wires. I’ve got a USB hub stashed in my desk drawer, which is plugged into a ScanSnap and a hard drive. The monitor needs power and a plug into the MacBook. The MacBook needs power. There’s too many wires.

Finally, since I have no speakers when the Mac is closed, I have an Amazon Basics bluetooth speaker on the shelf behind my desk. That works fine as long as I have sound being streamed to it. If I go for more then a few minutes without sound, the speaker turns off, which means I have to flip the switch on it to get it to pair again. Not ideal.

So, when considering my options for the next computer, I think there’s really only one choice considering my requirements.

  • As few wires as possible
  • Built-in iSight camera and speakers
  • Large Retina screen
  • Ergonomically correct for long periods of work

Sounds like an iMac to me.


Install Gems Without sudo in macOS

April 26, 2017

I came across a neat little command line tool via Rob Griffiths’ Robservatory this morning, a Ruby gem named iStats1. Install is easy enough in Rob’s example, sudo gem install iStats, except that when you use sudo to install gems you are using the default macOS Ruby, and installing to system paths.

➜  ~ /usr/bin/gem environment                            
RubyGems Environment:
RUBYGEMS VERSION: 2.0.14.1
RUBY VERSION: 2.0.0 (2015-12-16 patchlevel 648) [universal.x86_64-darwin16]
INSTALLATION DIRECTORY: /Library/Ruby/Gems/2.0.0
RUBY EXECUTABLE: /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/bin/ruby
EXECUTABLE DIRECTORY: /usr/local/bin
RUBYGEMS PLATFORMS:
    ruby
    universal-darwin-16
GEM PATHS:
    /Library/Ruby/Gems/2.0.0
    /Users/jonathanbuys/.gem/ruby/2.0.0
    /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/gems/2.0.0
GEM CONFIGURATION:
    :update_sources => true
    :verbose => true
    :backtrace => false
    :bulk_threshold => 1000
REMOTE SOURCES:
    https://rubygems.org/

While that might be fine, my personal preference is to keep the core system as close to default as possible. I once ran into an issue keeping Jekyll up to date, so now I use the excellent Homebrew to install an updated version of Ruby and keep the gems in /usr/local, which is entirely mine and safe to write to.

brew install ruby

Also, I make sure that /usr/local/bin is called before /usr/bin in my shells PATH variable.

export PATH=/usr/local/bin:~/Unix/bin/:$PATH

Now I can call gem install iStats and the gems will be installed safely, keeping my core system clean and my gems easily updatable.

  1. As Rob points out, this is apparently not associated with iStat Menus


Beware of VPNs

April 4, 2017

I’ve seen quite a few smart people recommend using a VPN service in the wake of the U.S. government’s decision to repeal privacy rules for ISPs. Unfortunately, I find this advice to be a bit misguided, or at least ill-informed. You can move your risk around, but in the end this comes down to an issue of trust, and avenues of recourse.

A VPN is a Virtual Private Network. It creates an encrypted tunnel between your computer and a remote server, and then optionally routes all of your Internet traffic through that tunnel. The case for using one for security against your ISP is that if your traffic is encrypted, they can’t see what you are browsing to and your data becomes useless to them to sell. Once your traffic reaches the other side of the VPN, it’s aggregated with all of the service’s other customers. That’s fine, and mostly makes sense, but if you are going to use a VPN service it’s important to come to an honest conclusion about how much you trust the company.

If your VPN server is outside of the United States, you are effectively giving up any legal recourse against the provider, meaning they can do whatever they want with your data, regardless of what they advertise or what they tell their customers. A single gateway for all of your traffic has a tremendous amount of power. They can inject code into any (non-SSL encrypted) web page. They can read all of your email. They can see all of the URLs you visit. All of the power of your ISP, you are transferring to your VPN provider, but if you choose a company outside of the United States, you lose whatever protection or recourse you have now.

What the ISPs are doing is not right, but at least we know what they are doing. If you pick a fly-by-night VPN service and send them all your traffic, there’s no telling what they’ll do with that data. It doesn’t matter if they post good things on their website if you can’t verify their claims.


Daring Fireball - The Mac Pro Lives

April 4, 2017

Apple is currently hard at work on a “completely rethought” Mac Pro, with a modular design that can accommodate high-end CPUs and big honking hot-running GPUs, and which should make it easier for Apple to update with new components on a regular basis. They’re also working on Apple-branded pro displays to go with them.

For those of us who make their living on their Mac, this is fantastic news. I might never buy a Mac Pro1, but I’ll still reap the benefits of Apple’s development and focus on Mac hardware and software. This is a message to the community that Apple hasn’t lost it’s mind; the Mac is still going strong.

What I will plan on buying is a new Apple display. My current Dell 4K display is ok, but after being spoiled by the Thunderbolt Display I had on my desk at the previous gig, this Dell feels like a big step back. No built in iSight camera, no built in speakers, too many wires, and that ugly Dell logo on the front. It’s a beautiful screen, and I need that for the number of hours I spend looking at text every day, but it’s all the rest of it, that overall Apple experience, that I’m missing.

I’ll be interested to hear what Marco has to say this evening on ATP. He has, at least to my mind, been the biggest skeptic and nay-sayer within the community when it comes to future prospects for the Mac. Of course, that’s nothing new. Mac enthusiasts have been hearing that their favorite computer is just about to die for literally decades. Yet here we are.

Link to Post

  1. But, then again, I might yet. 


Philippians

March 26, 2017

The book of Philippians is such a beautiful, and challenging book. This is what I needed to hear tonight:

Do all things without grumbling or questioning, that you may be blameless and innocent, children of God without blemish in the midst of a crooked and twisted generation, among whom you shine as lights in the world, holding fast to the word of life, so that in the day of Christ I may be proud that I did no run in vain or labor in vain. Philippians 2:14-16

I admit I’ve done quite a bit of grumbling and questioning the past few days. On the next page, I saw I had this passage marked:

Rejoice in the Lord always, again I say rejoice. Let your reasonableness be known to everyone. The Lord is at hand; do not be anxious about anything, but in everything by prayer and supplication with thanksgiving let your requests be made known to God. And the peace of God, which surpasses all understanding, will guard your hearts and your minds in Christ Jesus. Finally brothers, whatever is true, whatever is honorable, whatever is just, whatever is pure, whatever is lovely, whatever is commendable, if there is any excellence, if there his anything worthy of praise, think about these things. What you have learned and received and heard and seen in me–practice these things, and the God of peace will be with you. Philippians 4:4-9

  • “… you shine as lights in the world…”
  • “… And the peace of God, which surpasses all understanding, will guard your hearts and your minds in Christ Jesus”
  • “…and the God of peace will be with you.”

God of peace, guard my heart and my mind, and let me shine as your light in the world.


The Life We Live

March 22, 2017

My daughter’s cheerleading coach passed away last night. What was first thought of as diabetes turned out to be an extremely aggressive cancer that took her after only a few months. She was only ten years older than my wife and I. Her family, and our community, will be grieving deeply for her loss.

I know my daughter loved her, and when those we love die they take a part of us with them. Our family has lost parents and grandparents, close friends and people we admire. The pain of their loss can hit any one of us at any time; triggered by a date, or an object, or a memory of how they used to enjoy one thing or another. Sometimes we long for the comforting sound of their voice so much it aches inside us. When they are gone we wish for what everyone wishes for, more time.

But, despite my skepticism, despite my scientific, rational mind that often cries out for reason, I have to believe that there must be something more than this, that when the shadow of reality shimmers away, as it will for all of us, our consciousness, our soul, lives on. While we are bound to our physical bodies in the physical world, we can’t see it, but it’s there, waiting for each of us. The Bible tells us that each of us is given a certain number of days, and no one knows what that number is.

Our life is so short here, and the human body so fragile. Every second that passes is a second we can never get back. No amount of work or bartering can earn us even a minute more of our life back. But… we can make the passing of our time more worthwhile.

The Bible says that to gain eternal life, you must believe that Jesus is who is says he is and did what he said he did. But after that, what does it say about the time between salvation and eternal life? It says to love God with all your heart, mind, and soul, and to love your neighbor as yourself. It says to love your enemy, and bless those that persecute you. It says that God is love.

If we fill our days with kindness and mercy, if we leave petty ambition and envy behind, if we forgive slights against us, and smile in the face of adversity, if we stand up for what’s right, if we are honest and true, if we leave laziness and sloth behind us, if we give ourselves over completely to the task at hand, leaving nothing behind, wouldn’t that be a life well lived?

How will you finish the race? How will I? When the end comes for me, will I be able to look back satisfied that I spent my precious seconds the best way I could? Or will I be filled with regrets for the things I did and didn’t do? Am I pushing myself to become what I was placed on Earth to be? Or am I stagnating, inventing excuses and becoming bitter about why I can’t do one thing or another.

There will always be things you’d like to do, but can’t. Hard decisions and tradeoffs for what you believe is best for yourself and your family. Make the decision, embrace it, believe it, and move on to the next right thing to make this one, beautiful, precious life worthwhile.

Learn, build, grow, love. Be kind, gentle, patient, and enduring. Find joy in the moments we have, because life is here for a moment, and then, gone.


Eero and Disney Circle

February 22, 2017

tldr: If you have a Circle device and an Eero mesh network, plug the Circle into the Eero connected to your modem with an ethernet cable.

The router I bought last year just wasn’t cutting it anymore. Several times a day I’d have to turn off wifi and turn it back on again on my Mac, and I’d rarely see speeds over 12 Mbps, even though I’m paying for 100 Mbps from Mediacom. Part of it had to do with the placement of my desk relative to where the router sits, and part of it has to do with running my Mac in clamshell mode through most of the day. Whatever the reason, I was tired of it and splurged for a set of three Eero routers. Now I have one in the basement next to the modem, one in the office, and one in the kitchen, and I consistently get speeds around 70-80 Mbps from fast.com.

I was quite happy with my setup, until random devices on my home network suddenly stopped connecting to the Internet. First it was the Apple TV, then the Fire TV, then my daughters laptop, then my other daughters iPhone, then my iPhone, and when it got to my wife’s iPhone something had to change. Of course, I knew the culprit had to be our Circle from Disney.

The Circle is a little white box that sits on the network on controls access. It blocks content that we’d rather not have, and sets time limits, bed times, and reward systems for the kids. We have all the devices assigned to their owners and what we think are reasonable rules setup. For some reason when we hooked up the new routers I thought it’d be a good idea to move the circle out into the office; I guess I wanted to be able to see it. I sat the Circle next to the office Eero and assumed everything would be fine. It was not.

As I understand it, the Eero works by creating a subnetwork underneath your home network that is dedicated to the routers staying in contact with each other. Eero calls the software that manages the the system “TrueMesh™”, and it lets a device float between routers in the house without slowing down network speeds. The Circle works by using a technique called “ARP poisoning”, where the Circle becomes the default gateway on the network, allowing it to manage the traffic.

So, my theory is that when I set the Circle next to one of the satellite Eero routers, the Circle connected to the closest router and spoofed the default routers ARP address, which caused the router to not be able to communicate with the real default router, breaking the mesh network. Moving the Circle back to the basement and physically connecting1 it to the primary router solved the problem.

I should mention that the Eero also has parental controls similar to Circle’s built in. I haven’t fully explored them yet, but from what I can tell they don’t quite have the feature set of the Circle. Future software updates might change that, I’ll be keeping an eye on it.

Overall I’m quite happy with both the Eero and the Circle. While expensive, the combination of the two gives me a fast, robust home network with detailed controls over who and what connects, what they have access to, and for how long. 2

  1. Documentation for the Circle says that if your home internet speed is higher than 60 Mbps you should use the ethernet port. They probably don’t have a radio in the Circle strong enough to support faster speeds. 

  2. Also, don’t forget to dust your Eero regularly. 


Nirvana

February 5, 2017

In Nineteen Ninety-One, I was a freshman in high school, living in a tiny house in small town Montana. Just me and my mom. My family, like so many at the time, had fallen apart. We had moved around a lot, I felt odd and out of place. I was angry, full of teenage angst, and generally pissed off at the world for the hand it dealt me.

Somehow I had talked my mom into letting me have a TV in my room, and I used to stay up late at night to watch MTV broadcast the videos they deemed too weird for the standard days fare. It was one of those nights I saw and heard something new, something fresh and raw,Nirvana’s Smells Like Teen Spirit. It blew me away. Apparently I wasn’t the only one either, because soon after I first saw it the rest of the world discovered Nirvana as well.

It’s hard to overstate the impact Nirvana had. They really were something different, at least to me. A melding of punk and pure rock-n-roll, three guys in a garage belting their rage into the abyss. To me, the kid that I was, Nirvana was the complete opposite of the popular butt-rock of the time. I mean seriously, look at these guys.

I remember offroading in the backwoods of Montana, my friend driving way too fast in his S10 pickup, playing Lithium as loud as it would go, and the both of us howling with delight as we launched the pickup over another hill.

Nirvana led me to Pearl Jam, Soundgarden, Screaming Trees, Smashing Pumpkins, Blind Melon and so many more. They opened up the world of music to me by channeling what they felt through what they created, and I got it, because I felt that way too. Of course the lyrics of Smells Like Teen Spirit didn’t make any sense, but they didn’t have to, the world we were awakening to didn’t make any sense either. All we could to do was rage, rage, rage.

But not all the time. There were times of reflective introspection, easy, hopeful times of mindless joy, quiet times with the best of friends. A few years later, after the candle had burned so brightly, the light was put out.

Nirvana spoke to me in a way that nothing else did at the time. Nowadays I never listen to grunge, I mostly prefer jazz and classical. I also can’t say that the bands message is something I believe in now. I’ve moved on.