871
How I re–over-engineered my home network for privacy and security
How I used Docker Compose, Ansible, and Caddy to re-over-engineer my network setup for easier maintenance, treating my Raspberry Pi like cattle, not a pet.
New
The latest blog posts to take off on Hacker News. 1,839 posts.
Infrastructure & DevOps
Any year
872
Rolling your own minimal embedded Linux for the Raspberry Pi
Introducing a series of articles on building a custom Linux installation for the Raspberry Pi, for appliance applications.
873
Ansible Techniques I Wish I’d Known Earlier
If you’ve ever spent ages waiting for an Ansible playbook to get through a bunch of tasks so yours can be tested, then this article is for you.
874
875
Home Lab Hardware Guide
My home lab in a 12U rack as of March 2026. What is a Home Lab? Think of a home lab as a place where you can fail in the privacy of your own home. As
876
AWS doesn’t know who I am
AWS needs an identity that uniquely represents its users, not fractured across corporate identity providers.
877
Building Container Images with Nix
Dockerfiles are de facto standard for creating container images. In this article I highlight some issues with this approach and I propose building container images with Nix.
878
EC2 Boot Time Benchmarking
Once I finished writing ec2-boot-bench, the natural next step was to run some tests — in particular, to see how FreeBSD compared to other operating systems used in EC2. I used the c5.xlarge instance type and tested FreeBSD releases since 11.1-RELEASE (the first FreeBSD release which can run on the c5.xlarge instance…
879
What domain name to use for your home network
Always use the ‘.home.arpa’ top-level domain (RFC 8375), and don’t use the special-purpose ‘.local,’ or made-up undelegated domain names like ‘.lan’ or ‘.home.’
880
Do not do in code what can be done in infrastructure (2017)
Or subtitle: Maybe distributed programming is no longer a programming problem? (For the obvious impaired: This is meant to be more thought provoking than an actual truth) Over the last decade we ha…
881
DevOps, SRE, and Platform Engineering
Sharing my understanding of DevOps, SRE, and Platform Engineering based on the first-hand experience in SRE and PE domains.
882
MinIO: A Bare Metal Drop-In for AWS S3
Benchmarks & Tips for Big Data, Hadoop, AWS, Google Cloud, PostgreSQL, Spark, Python & More...
883
Fundamentals of Incident Management
When his phone wakes him at two in the morning, operations engineer Andy Pearson knows it’s bad news. The next sixteen minutes are going to get intense.
884
Powering the Lunar Base
NASA’s selection of SpaceX’s Starship within the Human Lander System (HLS) program was both surprising and exciting for space nerds all over. Previously I have written about how Starshi…
885
Tools to Run Kubernetes Locally
Kubernetes is a big and complicated technology and it clearly requires some time and dedication to wrap your head around. There is no vendor lock-in…
886
Uptime Lab's CM4 Blade Adds NVMe, TPM 2.0 to Raspberry Pi
A few weeks ago, I received two early copies of Uptime.Lab's CM4 Blade. The Blade is built for the Raspberry Pi Compute Module 4, which has the same processor as the Pi 4 and Pi 400, but without any of the built-in IO ports. You plug the CM4 into the Blade, then the Blade breaks out the connections to add some…
887
Bye CUPS: Printing with Netcat
Turns out printing doesn't have to be hard
888
Ultra fast Thunderbolt NAS with Apple M1 and Linux
In this post I discuss how you can upgrade a NAS Server by adding Thunderbolt 3 for lightning fast connectivity at 20 or 40Gbps. This particular implementation is specific to an Apple Mac Mini M1 and
889
Back to Linux
Background Note: I’ve started writing this article about one year ago (September 2020), but I dropped it at some point. Its final version is way less ambitious than my original plans for it, mostly because I forgot some of things that were on mind back then. Still, better than nothing. A long time ago (in 2011) I…
890
Docker in Production: A History of Failure (2016)
Introduction My first encounter with docker goes back to early 2015. Docker was experimented with to find out whether it could benefit us. At the time it wasn’t possible to run a container [i…
891
Laptop to Lambda: Outsourcing Everyday Jobs to Thousands of Transient Containers
This week’s paper review is the second in a series on “The Future of the Shell” (Part 1, a paper about possible ways to innovate in the shell is here ). As always, feel free to reach out on Twitter with feedback or suggestions about papers to read! These weekly paper reviews can also be delivered weekly to your inbox .
892
Self hosting is important
Computers are amazing tools and Internet is an amazing network, we can share everything we want with anyone connected. As for now, most of the Internet is neutral, meaning ISP have to give access to the Internet to their customer and don't make choices depending on the destination (like faster access for some…
893
Kubernetes is our generation's Multics
Yesterday's post enumerated # blog-topics related to understanding and using shell. Today's post started out as a "grab bag" of other topics, but is now centered around problems with # distributed-systems .
894
A monorepo misconception – atomic cross-project commits
Are cross-project changes in a single atomic commit the key advantage of monorepos? I do not think so.
895
Emacs Tramp over AWS SSM APIs
Cattle not pets The majority of AWS EC2 I need to operate these days are members of Kubernetes clusters. For remote access to them I’m more commonly authenticating to the Kube API to spawn a privileged ephemeral debugger pod rather than accessing the host directly. I have little need for host access even for the…
896
Good and Bad Monitoring
You remember that time you passive-aggressively completed a story in the most useless way possible to check that checkbox? That’s most…
897
Behind the scenes, AWS Lambda
How does AWS Lambda work under the hood? Let's find out together!
898
899
How I accidentally took down GitHub Actions (2019)
Last December, I was invited to a private bug bounty program to test a beta version of GitHub Actions. GitHub Actions is a workflow automation tool integrated with GitHub. One common use case of GitHub Actions is for CI builds – a project can fairly easily start up a Docker container every time they push a commit…
900
I made a mistake with Terraform and Azure made it worse
Craig Stuntz's personal website about programming languages, type theory, DIY synthesizers, compilers, and math.