151
I don't want to host services but I do
I don't want to self-host and think most individuals shouldn't host services for others. Yet I do it anyway, and even teach people how to.
New
The latest blog posts to take off on Hacker News. 341 posts.
152
Infrastructure audit completed by Radically Open Security
We tasked the Netherlands based security firm Radically Open Security (RoS) with performing the third audit towards our VPN infrastructure.
153
Kubernetes Exposed: One YAML Away from Disaster
We found two main misconfigurations in Kubernetes clusters belonging to more than 350 organizations openly accessible and largely unprotected.
154
Blueprint for a distributed multi-region IAM with Go and CockroachDB
Learn how to scale IAM globally. Ory provides secure multi-region identity solutions.
155
Graceful behavior at capacity
Suppose we’ve got a service. We’ll gloss over the details for now, but let’s stipulate that it accepts requests from the outside world, and takes some action in response. Maybe those requests are HTTP requests, or RPCs, or just incoming packets to be routed at the network layer. We can get more specific later. What…
156
Monitoring your logs is mostly a tarpit
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
157
Kafka is dead, long live Kafka
Chances are you probably had a strong reaction to the title of this post. In our experience, Kafka is one of the most polarizing technologies in the data space. Some people hate it, some people swear by it, but almost every technology company uses it.
158
GitHub Actions and vanity metrics
The measure of a modern software engineer in our attention economy is easily calculable thanks to companies like Microsoft acting both as bastion and companion in demonstrating one's prowess.
159
160
Virtualizing development environments in 2023
The limits of two modern virtualization methods: containers and virtual machines.
161
Cookbook: Finetuning Llama 2 in your own cloud environment, privately
An operational guide on finetuning Llama 2, ready for commercial use.
162
Systemd auto-restarts of units can hide problems from you
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
163
So, you want to deploy on the edge?
Application developers often deploy their apps into a single area, generally represented by a handful of AZs in a single region. No matter where their …
164
The Reluctant Sysadmin's Guide to Securing a Linux Server
I wrote a follow-up to this guide, which you should probably consider along with this article.
165
VyOS From Scratch – Edition 1 (set up your own router)
As a VyOS evangelist, maintainer, and more, I’ve been meaning to write a simple series of “how-to” guides for VyOS for a while. Sure, there are plenty of guides out there, but I think a lot of them fall short in demonstrating WHY you are entering specific commands.
166
On the future of free long term support for Linux distributions
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
167
Faster filesystem access with Directfs
Directfs is now the default in runsc. This feature gives gVisor’s application kernel (the Sentry) secure direct access to the container filesystem, avoiding expensive round trips to the filesystem gofer. Learn more about this feature in the following blog that was originally posted on Google Open Source Blog .
168
Building and operating a pretty big storage system called S3
Three distinct perspectives on scale that come along with building and operating a storage system the size of S3.
169
“It works on my machine” turns to “it works in my container” (2019)
You had things running with occasional glitches and there was always an excuse “It works in my machine” as there is rarely identical…
170
171
Bun v0.7.0
vite dev support, Workers, bun --smol, WebSocket.ping(), structuredClone(), serialize() and better Node.js compatibility
172
AWS networking concepts in a diagram
Before March 2023 I couldn’t for the life of me understand what was going on in the AWS VPC dashboard. I mean, look at the length of the scrolling bar on the left-hand panel! So, with the goa…
173
Rethinking Infrastructure as Code from Scratch
Recently I’ve been thinking a lot about infrastructure complexity, and the current state of infrastructure as code. This is problem space that many talented people are tackling.
174
Cold restart whole system after total outage
"What are folks’ views on systems so large where cold-starting the whole system is almost impossible?"... — M'colleague, Shivam, In A Slackroom Next Door.
175
Kraken Technologies: How we organise our large Python monolith
By David Seddon from Kraken Technologies. Hi, I’m David, a Python developer at Kraken Technologies. I work on Kraken: a Python application which has, at last count, 27,637 modules. Yes, you read that right: nearly 28k separate Python files - not including tests. I do this along with 400
176
The Nano ESP32
The Nano ESP32 introduces a new microcontroller architecture to the Nano family. The Nano ESP32 embraces one of the favorite IoT standards.
177
What's wrong with enterprise Linux
An examination of what is wrong with the Enterprise Linux model and a recommendation for a middle ground.
178
How I run my servers (2022)
I've been writing recently about servers and internet infrastructure 1 . A lot of this writing is predicated on running server software on a VM or physical machine, rather than using a more cloudy solution, which is somewhat unpopular these days. However, I think it's a pretty reasonable way to do things, and it's not…
179
Podman Desktop 1.2 Released: Compose and Kubernetes Support
Podman Desktop 1.2 has been released!
180
The future of AlmaLinux
It’s been a whirlwind few weeks here at AlmaLinux, and I’m elated to be able to finally share this update. The future of AlmaLinux OSIn case you missed it, Red Hat announced they will no longer be providing the means for downstream clones to continue to be 1:1 binary copies of Red Hat Enterprise Linux (RHEL). Very…