31
Securing Services with Rootless Containers
Some tips to improve security in applications deployed as containers.
New
The latest blog posts to take off on Hacker News. 1,839 posts.
Infrastructure & DevOps
Any year
32
Self-host your mail server
Personal Blog of Christian Haschek
33
HomeLab #1: MikroTik as a Home Router
Proceed at your own risk! (... it's worth it)
34
The death and rebirth of my home server
steen's online burrow
35
Let's Build PlanetScale from Scratch: Infrastructure
Homescale, PlanetScale at home.
36
Nobody knows what a used GPU cluster is worth
If xAI defaults on its debt, Apollo Global Management ends up in the GPU rental business.
37
TLS certificates for internal services done right
No self-signing headaches, no TLS erros.
38
How to Build a Minimal ZFS NAS Without Synology, QNAP, TrueNAS (2024)
If you need a basic NAS and don't care about GUI features, it is suprisingly simple to set up a ZFS dataset and share it over the network using Samba.
39
Ditching Vagrant: VMs with KVM and Virsh on Debian
Goodbye, old friend. We’ve been traveling together since 2010, and you’ve faithfully served all my virtual machine needs well, first with VirtualBox and then later with libvirt and KVM . But, as they 1 say, all good things must pass.
40
Incident CVE-2026-LGTM
A series of unfortunate agents.
41
In praise of memcached
If you happen to find yourself in a sysadmin position, or a position where you just so happen to maintain someone’s infrastructure , chances are that at some point in time the topic “we need a cache” comes up.
42
A Practical Guide to SSH Tunnels: Local and Remote Port Forwarding
SSH port forwarding explained in a clean and visual way. How to use local and remote port forwarding. What sshd settings may need to be adjusted. How to memorize the right flags.
43
I can haz smoller NixOS ISOs?
In which I painstakingly remove functionality from a Linux live image. Like a normal person.
44
Running MicroVMs in Proxmox VE, the Easy Way
I’ve been running a mixed Proxmox cluster for years – four nodes of wildly different capability, from an Atom x5-Z8350 with 2 GB of RAM (a z83ii, currently ...
45
10Gb/s Ethernet: switching to a Broadcom SFP+ module
As predicted by several people, one of my Marvell-based SFP+ modules had overheating problems. I've switched it over to a Broadcom-based one, and it looks better, though I can't be certain.
46
What job interviews taught me about Kubernetes
So I've been job hunting lately. Reading job postings, doing interviews, talking to engineering teams at like a dozen companies. And I noticed...
47
My Homelab AI Dev Platform
Self-hosting OpenCode Web for GitOps style homelab changes.
48
Caddy compatibility for zeroserve: 3x throughput and 70% lower latency
zeroserve is a high-performance HTTPS server that runs eBPF scripts in userspace ( intro ). Now it's got a Caddy-compat mode - when provided a Caddyfile, zeroserve JIT-compiles it to eBPF and then to native x86_64/ARM64 machine code, and runs it in an io_uring event loop.
49
Introduction to UEFI HTTP(s) Boot with QEMU/OVMF
The historic go-to solution for network booting is PXE. PXE is based on DHCP and TFTP. It is tricky to correctly configure, even trickier to make it highly available and good luck with the security with this clear-text unsigned protocol.
50
Linux latency measurements and compositor tuning
Linux latency on the desktop and in games compared to Windows. Network streaming with Sunshine and Moonlight. Tuning the KWin compositor for lower latencies.
51
Flat Datacenter Networks at Scale at Amazon
The research roots of finding “optimal routing” networks trace back to the late 1970s. Mathematicians defined special kinds of networks called “expanders“. These are graphs with strong connectivity properties guaranteeing no subset of vertices can be isolated from the rest. In 1976, Leslie Valiant gave one of the…
52
Zeroserve: A zero-config web server you can script with eBPF
zeroserve is a small, fast, zero-config HTTPS server. You hand it a tarball of a website and it serves it - over HTTP/2 and TLS 1.3, with hot reload and a tiny resident footprint. The twist is that you can drop eBPF programs into the tarball and they run on every request, in userspace, as sandboxed middleware …
53
I tested every IP KVM in my Homelab
Since the PiKVM came out in 2017, there's been an explosion of IP KVMs. I've tested almost every one. But what are they good for? You can use Remote Desktop, Screen Sharing, or VNC to remote control a computer from anywhere on a LAN. And if you don't have a private VPN, you could use RealVNC, Raspberry Pi Connect, or…
54
Azure Linux 4.0 is Microsoft's first general-purpose Linux
Microsoft’s in-house Linux, the distribution that grew out of CBL-Mariner, just hit public preview as a general-purpose cloud OS you can run on any Azure VM and coming soon to WSL.
55
WSL 2 is getting faster Windows file system access
From DrvFs in WSL 1 to Plan 9 to virtiofs, cross-OS file access in WSL 2 has improved with each generation. A new change gives each virtio device its own dedicated DMA pool, removing the last major contention point on the virtiofs path.
56
Sysadmining Like It's 2009
2026 legacy lab summer camp plan
57
Indoor Wi-Fi Roaming with OpenWRT
A few months after writing up the Cudy AX3000 units and moving the house over to OpenWRT, I ended up revisiting the one bit I had deliberately waved away ...
58
AWS Fired the One Employee Who Gave a Damn
Remember Tarus Balog, the AWS employee who rescued my deleted account when nobody else would? AWS just fired him. His proudest accomplishment in four years was saving my data. Leadership didn't care. The finale of a trilogy nobody asked for.
59
Amazon Web Services – Four Years and Out
Today marks four years since I joined AWS. My last day will be Friday.\nI have to say being fired from AWS is actually a relief. There have been a lot of changes to the company since I joined in 2022, and the company I wanted to work for is no longer the same company.\nThis past year, while I was doing my best to make…
60
Blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD
After a decade on Ubuntu 16.04, I migrated my blog to FreeBSD on Hetzner. Some notes on setting up a VPS with FreeBSD, Jails, Bastille, Caddy reverse proxies, and load testing and benchmarking the blog from four continents.