271
Docker without Docker
Our users deliver software to us as Docker containers, but we don’t use Docker to run them. We transmogrify container images into Firecracker micro-VMs. Here's how.
New
The latest blog posts to take off on Hacker News. 341 posts.
272
Screw it, I’ll host it myself
It’s all fun and games until someone loses an eye. Likewise, it’s all fun and games until someone loses access to their private and/or business data because they trusted it to someone else.
273
Don’t use environment variables for configuration
Suppose you need to create a function for adding two numbers together in plain C. How would you write it? What sort of an API would it have?...
274
EC2 Serial Console
Fixing production issues is one of the key responsibilities of system and network administrators. In fact, I’ve always found it to be one of the most interesting parts of infrastructure engineering. Diving as deep as needed into the problem at hand, not only do you (eventually) have the satisfaction of solving the…
275
Kafka without ZooKeeper
Major milestone release Apache Kafka 4.0 removes ZooKeeper entirely, provides early access to Queues for Kafka, and enables faster rebalances, in addition to many other new KIPs.
276
Storage is now available in Supabase (YC S20)
Launching Supabase Storage and how you can use it in your apps
277
Apt Encounters of the Third Kind
A few weeks ago an ordinary security assessment turned into an incident response whirlwind. It was definitely a first for me, and I was kindly granted permission to outline the events in this blog post. This investigation started scary but turned out be quite fun, and I hope reading it will be informative to you too…
278
All my servers have an 8 GB empty file on disk
Last night I was listening to the latest Under the Radar , where Marco Arment dove into nerdy detail about his recent Overcast server issues. The discussion was great, and you should listen to it, but Marco's recent server troubles were pretty similar to my own server issues from last year, and so I figured I'd share…
279
Google SRE - Defining slo: service level objective meaning
SRE SLO book to understand service level objective meaning and the various service level terminilogy including sla slo sli to improve service reliability.
280
We are far from a better Heroku for production apps in a hyper cloud
GitLab is building Heroku for production apps in hyper clouds, integrated into your DevSecOps workflow: The 5 minute production app.
281
The S in IoT is for Security
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
282
Amazon S3 Object Lambda
March 15, 2023 – You can now use S3 Object Lambda with Amazon CloudFront to tailor content for end users. August 13, 2024 – Added a note clarifying that, when following the walkthrough, you should not mark the Specify Lambda function version option that was added after this post was published. When you store data in…
283
Unironically using Kubernetes for my personal blog
There’s no shortage of posts like “Let’s use Kubernetes!” Now you have 8 problems, or Do I Really Need Kubernetes?, which tend to argue that unless you’re orchestrating 1000 containers, you’re good without Kubernetes. Also, I thought this tweet was hilarious: So… Hi, I’m the guy using Kubernetes for my blog and small…
284
Reverse Engineering a Docker Image
This started with a consulting snafu: Government organisation A got government organisation B to develop a web application. Government organisation B subcontracted part of the work to somebody. Hosting and maintenance of the project was later contracted out to a private-sector company C. Company C discovered that the…
285
Our journey from a Python monolith to a managed platform
Dropbox, to our customers, needs to be a reliable and responsive service. As a company, we’ve had to scale constantly since our start, today serving more than 700M registered users in every time zone on the planet who generate at least 300,000 requests per second. Systems that worked great for a startup hadn’t scaled…
286
Moderation in Infrastructure
Infrastructure companies need a distinct approach to moderation that focuses on neutrality and due process.
287
288
Why we decided for and against Ubuntu Core
Nitrokey explains why NextBox runs Debian instead of Ubuntu Core. An in-depth look at the technical and philosophical reasons behind the OS choice for the NextBox platform.
289
Docker Security Cheat Sheet
Website with the collection of all the cheat sheets of the project.
290
291
292
Backblaze is now a Terraform provider
Making provision of that storage easier for developers is part of Terraform’s DNA. Learn how to get started.
293
The security scanner that cried wolf
If you’ve ever been alarmed by how many security vulnerabilities your Docker image has, even after you’ve installed security updates, here’s what’s going on.
294
Building a high-scale chat server on Cloud Run
In this blog, I will show you how to use WebSockets support to build a fleet of serverless containers that make up a chatroom server that can scale a high number of concurrent connections (250,000 clients).
295
296
SSH and User-Mode IP WireGuard
Documentation and guides from the team at Fly.io.
297
Take a look at Nomad before jumping on Kubernetes
Hashicorp's Nomad is a great, easy to use and very flexible task scheduler/orchestrator, and actually fares up decently against Kubernetes.
298
Common Nginx misconfigurations that leave your web server open to attack
Detectify analyzed 50,000 unique Nginx configuration files on GitHub and reported some common misconfigurations.
299
Google Cloud vs. AWS Onboarding Comparison
Kevin Lin builds tools for humans and agents.
300
Open Source in the 5G Stack
The NTIA has requested suggestions for a challenge to accelerate development of the open 5G stack ecosystem. GitHub's submission emphasizes open source best practices.