1021
Privacy friendly ESP32 smart doorbell with Home Assistant local integration
Privacy focused “smart” doorbells seem to be few and far between so I decided to build one that integrates with Home Assistant via ESPHome and is easy to build.
New
The latest blog posts to take off on Hacker News. 4,377 posts.
Infrastructure & DevOps
Any year
1022
Testing on production
It might seem like a click baity title but it’s not. Let me explain.
1023
Podman v4.6 Introduces Podmansh: A Revolutionary Login Shell
Introduction In the ever-evolving landscape of container technology, Podman’s latest version, v4.6.0, includes a feature that promises to be a game-changer for system administrators: Podmansh…
1024
Notes on running a single-person Mastodon server
Notes on using a single-person Mastodon server
1025
Squeeze the hell out of the system you have
When complexity leaps are on the table, there’s usually also an opportunity to squeeze some extra juice out of the system you have. By tweaking the workload, tuning performance, or supplement…
1026
What HashiCorp’s license change means for our customers
On August 10, 2023, HashiCorp changed licensing for all its products, including Terraform. See what does it mean and how to mitigate its impact.
1027
1028
My Overkill Home Network
In this post I will hopefully detail my entire home network. Some of this has been in separate posts explaining single items, but nowhere do I have all of the network in one post with all the changes since last year. Here is a full shot of the rack in
1029
I don't want to host services but I do
I don't want to self-host and think most individuals shouldn't host services for others. Yet I do it anyway, and even teach people how to.
1030
Infrastructure audit completed by Radically Open Security
We tasked the Netherlands based security firm Radically Open Security (RoS) with performing the third audit towards our VPN infrastructure.
1031
Kubernetes Exposed: One YAML Away from Disaster
We found two main misconfigurations in Kubernetes clusters belonging to more than 350 organizations openly accessible and largely unprotected.
1032
Blueprint for a distributed multi-region IAM with Go and CockroachDB
Learn how to scale IAM globally. Ory provides secure multi-region identity solutions.
1033
Graceful behavior at capacity
Suppose we’ve got a service. We’ll gloss over the details for now, but let’s stipulate that it accepts requests from the outside world, and takes some action in response. Maybe those requests are HTTP requests, or RPCs, or just incoming packets to be routed at the network layer. We can get more specific later. What…
1034
Monitoring your logs is mostly a tarpit
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
1035
Kafka is dead, long live Kafka
Chances are you probably had a strong reaction to the title of this post. In our experience, Kafka is one of the most polarizing technologies in the data space. Some people hate it, some people swear by it, but almost every technology company uses it.
1036
GitHub Actions and vanity metrics
The measure of a modern software engineer in our attention economy is easily calculable thanks to companies like Microsoft acting both as bastion and companion in demonstrating one's prowess.
1037
1038
Virtualizing development environments in 2023
The limits of two modern virtualization methods: containers and virtual machines.
1039
Cookbook: Finetuning Llama 2 in your own cloud environment, privately
An operational guide on finetuning Llama 2, ready for commercial use.
1040
Systemd auto-restarts of units can hide problems from you
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
1041
So, you want to deploy on the edge?
Application developers often deploy their apps into a single area, generally represented by a handful of AZs in a single region. No matter where their …
1042
The Reluctant Sysadmin's Guide to Securing a Linux Server
I wrote a follow-up to this guide, which you should probably consider along with this article.
1043
VyOS From Scratch – Edition 1 (set up your own router)
As a VyOS evangelist, maintainer, and more, I’ve been meaning to write a simple series of “how-to” guides for VyOS for a while. Sure, there are plenty of guides out there, but I think a lot of them fall short in demonstrating WHY you are entering specific commands.
1044
On the future of free long term support for Linux distributions
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
1045
Faster filesystem access with Directfs
Directfs is now the default in runsc. This feature gives gVisor’s application kernel (the Sentry) secure direct access to the container filesystem, avoiding expensive round trips to the filesystem gofer. Learn more about this feature in the following blog that was originally posted on Google Open Source Blog .
1046
Building and operating a pretty big storage system called S3
Three distinct perspectives on scale that come along with building and operating a storage system the size of S3.
1047
“It works on my machine” turns to “it works in my container” (2019)
You had things running with occasional glitches and there was always an excuse “It works in my machine” as there is rarely identical…
1048
1049
Bun v0.7.0
vite dev support, Workers, bun --smol, WebSocket.ping(), structuredClone(), serialize() and better Node.js compatibility
1050
AWS networking concepts in a diagram
Before March 2023 I couldn’t for the life of me understand what was going on in the AWS VPC dashboard. I mean, look at the length of the scrolling bar on the left-hand panel! So, with the goa…