New
The latest blog posts to take off on Hacker News. 4,377 posts.
Infrastructure & DevOps
Any year
New IBM LinuxONE 4 Express – Rack-mounted pre-configured Linux mainframe
IBM announced IBM® LinuxONE 4 Express, extending the latest performance, security and AI capabilities of LinuxONE to small and medium sized businesses and within new data center environments.
BuildKit in depth: Docker's build engine explained
This article explains how BuildKit works in depth, why it's faster than Docker's previous build engine, and what it looks like under the hood.
We might want to regularly keep track of how important each server is
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
Why Postgres RDS didn't work for us
Background
A lesson in dockerizing shell scripts
My learnings from publishing my first ever Dockerfile for ugit (a shell script based tool to undo git command) and writing the most optimized dockerfile for it.
XFaaS: Hyperscale and Low Cost Serverless Functions at Meta
This is one of several papers I’ll be reading from 2023’s Symposium on Operating Systems Principles (SOSP). If you’d like to receive regular updates as soon as they’re published, check out my newsletter or follow me on the site formerly known as Twitter . Enjoy!
Why Certificate Lifecycle Automation Matters
If you’ve perused the ActivityPub feed of certificates whose keys are known to be compromised , and clicked on the “Show More” button to see the name of the certificate issuer, you may have noticed that some issuers seem to come up again and again. This might make sense – after all, if a CA is issuing a large volume…
Executing Cron Scripts Reliably at Scale
Cron scripts are responsible for critical Slack functionality. They ensure reminders execute on time, email notifications are sent, and databases are cleaned up, among other things. Over the years, both the number of cron scripts and the amount of data these scripts process have increased. While generally these cron…
I looked through attacks in my access logs
I've been self-hosting for over a decade. It's freeing because I own my data, and do not depend on any platform other than my cloud host, which I can easily switch off. Self-hosting gives much insight into what it takes to run a cloud service. Anyone
Proposed top-level domain string for private use: ".internal"
ICANN received a total of 32 public comments from across the community on the Proposed Top-Level Domain String for Private Use. Thirteen of these were in support of the proposal. Of the remaining nineteen comments, six believed a shorter string should be selected, one believed a more meaningful string should be…
Why are we templating YAML? (2019)
I was at cfgmgmtcamp 2019 in Ghent, and did a talk which I think was well received about the need for some Kubernetes configuration management as well as the solution
Building a fair multi-tenant queuing system
Building the Inngest queue - Part I
Cutting down AWS cost by $150k per year simply by shutting things off
Cloud cost optimization at scale part 1: how we save approx 150k USD a year by simply shutting things off
The Bun Shell
The Bun Shell is a cross-platform shell that allows you to run shell scripts in JavaScript & TypeScript
Ceph: A Journey to 1 TiB/s
Ceph is an open source distributed storage system designed to evolve with data.
Sourcehut network outage post-mortem
sourcehut is a network of useful open source tools for software project maintainers and collaborators, including git repos, bug tracking, continuous integration, and mailing lists.
Winding down Google Sync and Less Secure Apps support
MDM push of password based IMAP, CalDAV, CardDAV, STMP, POP and Exchange ActiveSync (Google Sync) will no longer work for customers who try to connect to an LSA for the first time.
Ditching PaaS: Why I Went Back to Self-Hosting
I had never been a fan of devops/server-admin work. The sheer number of headaches involved in setting up the services, configuring them, automating them, and ensuring their reliability were just annoying and time-consuming. PaaS offerings like Heroku, AWS—and later—Railway, and Render, were appealing options out of…
Filecoin Foundation Successfully Deploys IPFS in Space
Filecoin Foundation successfully deploys IPFS in space. Discover the details of this groundbreaking achievement.
Slashing data transfer costs in AWS
There are lots of ways to accidentally spend too much money on AWS, and one of the easiest ways is by carelessly transferring data. As of writing, AWS charges the following rates for data transfer:
Project Bluefin: an immutable, developer-focused, Cloud-native Linux
Today we "relaunched" ublue-os/bluefin as projectbluefin.io. This is a beta until Spring 2024. Bluefin is a custom image of Fedora Silverblue by a bunch of cloud-native nerds. We want a reliable desktop experience that runs everything but we're too lazy to maintain anything. So we
The Ultimate Docker Cheat Sheet
TLDR; Get your Docker Cheat Sheet as PDF or as an image . To follow this article, make sure your development machine has Docker installed . In this blog post, we write our own Dockerfiles, learn how to create images, and finally run them as container. The complete source code is available on GitHub .
Exploring Podman: A More Secure Docker Alternative
This article explore Podman's features and benefits, comparing it to Docker and describing a step-by-step migration guide
The current state of OpenTelemetry
OpenTelemetry round for 2023 and what to expect in 2024
GitHub Actions as a time-sharing supercomputer
Learn how and why I turned GitHub's APIs into a time-sharing supercomputer from the 1970s to execute modern batch jobs.