Securing Services with Rootless Containers
Some tips to improve security in applications deployed as containers.
The latest blog posts to take off on Hacker News. 276 posts.
Some tips to improve security in applications deployed as containers.
Personal Blog of Christian Haschek
Proceed at your own risk! (... it's worth it)
steen's online burrow
Homescale, PlanetScale at home.
If xAI defaults on its debt, Apollo Global Management ends up in the GPU rental business.
PgBouncer is single-threaded, so a single process caps out at one CPU core no matter the box size. See how ClickHouse Managed Postgres runs a peered fleet of PgBouncer processes with so_reuseport to scale pooling across every core — with benchmarks showin
No self-signing headaches, no TLS erros.
Why & how we rewrote Bun from Zig to Rust
Cloudflare Research is building a global consensus service called Meerkat that uses a new consensus algorithm called QuePaxa. We plan to use Meerkat to build a strongly consistent, fault-tolerant key-value store, and other applications.
If you need a basic NAS and don't care about GUI features, it is suprisingly simple to set up a ZFS dataset and share it over the network using Samba.
PgDog is a connection pooler, load balancer, and sharding proxy for PostgreSQL. Scale Postgres horizontally without rewriting your application.
Goodbye, old friend. We’ve been traveling together since 2010, and you’ve faithfully served all my virtual machine needs well, first with VirtualBox and then later with libvirt and KVM . But, as they 1 say, all good things must pass.
We are launching Workers Cache, a regionally tiered cache that sits directly in front of your Worker entrypoints. Infinitely composable, configured via standard HTTP headers
We’re thrilled to announce that Podman v6.0.0 is now available! This major release brings a host of significant improvements and new features designed to enhance your container management exp…
How a statistical approach cut IPFS content publishing times by over one order of magnitude.
Hyprland Noctalia, DNS-over-QUIC, GCC Branch Prediction
Nix is a tool that takes a unique approach to package management and system configuration. Learn how to make reproducible, declarative and reliable systems.
A series of unfortunate agents.
NVIDIA’s latest AI servers can run on coolant warmer than a hot tub — and that counterintuitive choice is one of the biggest efficiency leaps in data center history.
Your DNS bill shouldn't scale with your traffic. So we removed query fees from Bunny DNS entirely. No per-request billing and no query limits.
AWS launches a new serverless compute primitive, AWS Lambda MicroVMs. VM-level, isolated sandboxes with no shared kernel or resources between sessions. Rapid launch and resume, full lifecycle control, state preservation up to 8 hours, no infrastructure to manage.
If you happen to find yourself in a sysadmin position, or a position where you just so happen to maintain someone’s infrastructure , chances are that at some point in time the topic “we need a cache” comes up.
Chevron Corporation (NYSE: CVX) today announced that Energy Forge One LLC, a wholly owned subsidiary, has signed an agreement with Microsoft Corp. (NASDAQ: MSFT) to develop a co-located power facility in West Texas that will provide dedicated electricity to a Microsoft-operated data center under a 20-year power…
IPv6 has reached a major milestone, with around half of Google’s users now accessing its services over IPv6.
SSH port forwarding explained in a clean and visual way. How to use local and remote port forwarding. What sshd settings may need to be adjusted. How to memorize the right flags.
In which I painstakingly remove functionality from a Linux live image. Like a normal person.
I’ve been running a mixed Proxmox cluster for years – four nodes of wildly different capability, from an Atom x5-Z8350 with 2 GB of RAM (a z83ii, currently ...
Discover ENAS, the license-free enterprise storage platform featuring native ZFS, secure UniFi management, scalable petabyte-class capacity, multi-site backups, and shared iSCSI storage for modern business infrastructure.