241
Switching Pip to Uv in a Dockerized Flask / Django App
I noticed about a 10x speed up across a number of projects, we'll avoid using a venv and run things as a non-root user too.
New
The latest blog posts to take off on Hacker News. 1,839 posts.
Infrastructure & DevOps
Any year
242
Using Home Assistant, adguard home and an $8 smart outlet to avoid brain rot
Preamble# The internet is the bane of my existence. Ads, distractions, sponsored content, bad news, bad ideas, more ads, social media, antisocial media, even more ads. Also, I’m a software developer, so the internet is basically indispensable for me, a central pillar of my income and a convenient way to communicate…
243
We moved from AWS to Hetzner, saved 90%, kept ISO 27001 with Ansible
The European CTO’s Dilemma: Keeping Compliance outside AWS
244
What would a Kubernetes 2.0 look like
As we approach the 10 year anniversary of the 1.0 release of Kubernetes, let's take stock of the successes and failures of the project in the wild. Also what would be on a wish list for a Kubernetes 2.0 release.
245
246
Worldwide power grid with glass insulated HVDC cables
Moving electricity around the world has huge financial and environmental benefits. Unfortunately, current power transmission systems are both lossy and expensive to build. This post explores an alternative design for cables to make undersea power transmission substantially cheaper.
247
Bypassing GitHub Actions policies in the dumbest way possible
TL;DR : GitHub Actions provides a policy mechanism for limiting the kinds of actions and reusable workflows that can be used within a repository, organization, or entire enterprise. Unfortunately, this mechanism is trivial to bypass . GitHub has told me that they don’t consider this a security issue (I disagree), so…
248
Self-Host and Tech Independence: The Joy of Building Your Own
Why I self-host my websites, newsletter, and homelab—and the satisfaction that comes from building and using your own digital tools.
249
How I like to install NixOS (declaratively)
For one of my network storage PC builds, I was looking for an alternative to Flatcar Container Linux and tried out NixOS again (after an almost 10 year break). There are many ways to install NixOS, and in this article I will outline how I like to install NixOS on physical hardware or virtual machines: over the network…
250
Using lots of little tools to aggressively reject the bots
Or using lots of little tools to aggressively reject the bots
251
Creating Debian packages from upstream Git
In this post, I demonstrate the optimal workflow for creating new Debian packages in 2025, preserving the upstream Git history. The motivation for this is to lower the barrier for sharing improvements to and from upstream, and to improve software provenance and supply-chain security by making it easy to inspect every…
252
253
MCP is the coming of Web 2.0 2.0
A blog about making culture. Since 1999.
254
New Tool: lsds – List All Linux Block Devices and Settings in One Place
When dealing with disks and I/O things on Linux, you’d regularly run commands like lsblk, lsscsi, nvme list, etc. All of them tend to report a different set of information, so I ended up running multiple commands and correlating their output based on the device name or number. And then I had to run commands like…
255
Static as a Server
You wouldn't download a site.
256
Replacing Kubernetes with systemd (2024)
In this post I go through the journey of overusing Kubernetes and how systemd can actually do most of what I use it for.
257
258
Why Does My eBPF Program Work on One Kernel but Fail on Another?
How to Build Truly Portable eBPF Programs
259
Don't sell space in your homelab (2023)
Hanging out in subreddits like /r/homelab, /r/servers, and /r/datahoarder, I see this question asked too many times: I have extra space in my home server, how …
260
.localhost Domains
I’ve found a way to configure private, custom domains for web-apps I have running on my computer. So instead of having to remember and type “localhost:4333”, I can simply navigate to “appname.localhost”. I love it!
261
262
Nix Derivations, Without Guessing
I went on a little low-level Nix adventure yesterday and early this morning because of this excellent blog post. In it, Farid builds up the simplest possible Nix derivation—making a file that has the contents “hello world”. Here’s what I like about it:
263
The order of files in /etc/ssh/sshd_config.d/ matters
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
264
265
Why I run FreeBSD for my home servers (2024)
Why FreeBSD instead of Linux for home servers? Exploring ZFS, jails, stability, and the reasons behind choosing FreeBSD for a home infrastructure.
266
Take this on-call rotation and shove it
At some companies, it is expected that certain engineers will serve as part of a formal on-call rotation. On paper, this seems like a reasonable way to ensure the reliability of the product. In practice, it is a miserable burden and you probably won't even get paid for it.
267
It's five grand a day to miss our S3 exit
We're spending just shy of $1.5 million/year on AWS S3 at the moment to host files for Basecamp, HEY, and everything else. The only way we were able to get the pricing that low was by signing a four-year contract. That contract expires this summer, June 30, so that's our departure date for the final leg of our cloud…
268
Building a Firecracker-Powered Course Platform to Learn Docker and Kubernetes
The iximiuz Labs origin story: five years of technical blogging followed by six months of active development resulted in an online learning-by-doing platform for DevOps, SRE, and Platform Engineers.
269
Whose code am I running in GitHub Actions?
I wanted to know what third-party code I was using in my GitHub Actions. I was able to use standard text processing tools and shell pipelines to get a quick tally.
270
If you get the chance, always run more extra network fiber cabling
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…