241
Systemd by Example (2021)
The first article in a series where I explore aspects of systemd by creating small examples with the help of containers.
New
The latest blog posts to take off on Hacker News. 281 posts.
242
Keycloak SSO with Docker Compose and Nginx
A personal code notes blog
243
Almost every infrastructure decision I endorse or regret
Assortment of technology startup infrastructure recommendations
244
245
246
New IBM LinuxONE 4 Express – Rack-mounted pre-configured Linux mainframe
IBM announced IBM® LinuxONE 4 Express, extending the latest performance, security and AI capabilities of LinuxONE to small and medium sized businesses and within new data center environments.
247
BuildKit in depth: Docker's build engine explained
This article explains how BuildKit works in depth, why it's faster than Docker's previous build engine, and what it looks like under the hood.
248
We might want to regularly keep track of how important each server is
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
249
250
Why Postgres RDS didn't work for us
Background
251
A lesson in dockerizing shell scripts
My learnings from publishing my first ever Dockerfile for ugit (a shell script based tool to undo git command) and writing the most optimized dockerfile for it.
252
253
XFaaS: Hyperscale and Low Cost Serverless Functions at Meta
This is one of several papers I’ll be reading from 2023’s Symposium on Operating Systems Principles (SOSP). If you’d like to receive regular updates as soon as they’re published, check out my newsletter or follow me on the site formerly known as Twitter . Enjoy!
254
Why Certificate Lifecycle Automation Matters
If you’ve perused the ActivityPub feed of certificates whose keys are known to be compromised , and clicked on the “Show More” button to see the name of the certificate issuer, you may have noticed that some issuers seem to come up again and again. This might make sense – after all, if a CA is issuing a large volume…
255
Executing Cron Scripts Reliably at Scale
Cron scripts are responsible for critical Slack functionality. They ensure reminders execute on time, email notifications are sent, and databases are cleaned up, among other things. Over the years, both the number of cron scripts and the amount of data these scripts process have increased. While generally these cron…
256
I looked through attacks in my access logs
I've been self-hosting for over a decade. It's freeing because I own my data, and do not depend on any platform other than my cloud host, which I can easily switch off. Self-hosting gives much insight into what it takes to run a cloud service. Anyone
257
Proposed top-level domain string for private use: ".internal"
ICANN received a total of 32 public comments from across the community on the Proposed Top-Level Domain String for Private Use. Thirteen of these were in support of the proposal. Of the remaining nineteen comments, six believed a shorter string should be selected, one believed a more meaningful string should be…
258
259
Why are we templating YAML? (2019)
I was at cfgmgmtcamp 2019 in Ghent, and did a talk which I think was well received about the need for some Kubernetes configuration management as well as the solution
260
Building a fair multi-tenant queuing system
Building the Inngest queue - Part I
261
Cutting down AWS cost by $150k per year simply by shutting things off
Cloud cost optimization at scale part 1: how we save approx 150k USD a year by simply shutting things off
262
The Bun Shell
The Bun Shell is a cross-platform shell that allows you to run shell scripts in JavaScript & TypeScript
263
Ceph: A Journey to 1 TiB/s
Ceph is an open source distributed storage system designed to evolve with data.
264
Sourcehut network outage post-mortem
sourcehut is a network of useful open source tools for software project maintainers and collaborators, including git repos, bug tracking, continuous integration, and mailing lists.
265
Winding down Google Sync and Less Secure Apps support
MDM push of password based IMAP, CalDAV, CardDAV, STMP, POP and Exchange ActiveSync (Google Sync) will no longer work for customers who try to connect to an LSA for the first time.
266
Ditching PaaS: Why I Went Back to Self-Hosting
I had never been a fan of devops/server-admin work. The sheer number of headaches involved in setting up the services, configuring them, automating them, and ensuring their reliability were just annoying and time-consuming. PaaS offerings like Heroku, AWS—and later—Railway, and Render, were appealing options out of…
267
Filecoin Foundation Successfully Deploys IPFS in Space
Filecoin Foundation successfully deploys IPFS in space. Discover the details of this groundbreaking achievement.
268
Slashing data transfer costs in AWS
There are lots of ways to accidentally spend too much money on AWS, and one of the easiest ways is by carelessly transferring data. As of writing, AWS charges the following rates for data transfer:
269
Project Bluefin: an immutable, developer-focused, Cloud-native Linux
Today we "relaunched" ublue-os/bluefin as projectbluefin.io. This is a beta until Spring 2024. Bluefin is a custom image of Fedora Silverblue by a bunch of cloud-native nerds. We want a reliable desktop experience that runs everything but we're too lazy to maintain anything. So we
270
The Ultimate Docker Cheat Sheet
TLDR; Get your Docker Cheat Sheet as PDF or as an image . To follow this article, make sure your development machine has Docker installed . In this blog post, we write our own Dockerfiles, learn how to create images, and finally run them as container. The complete source code is available on GitHub .