241
Dagger: A shell for the container age
Build powerful software environments and containerized operations from modular components and simple functions. Perfect for complex software delivery and AI agents. Built by the creators of Docker.
New
The latest blog posts to take off on Hacker News. 321 posts.
242
Building a Firecracker-Powered Course Platform to Learn Docker and Kubernetes
The iximiuz Labs origin story: five years of technical blogging followed by six months of active development resulted in an online learning-by-doing platform for DevOps, SRE, and Platform Engineers.
243
Whose code am I running in GitHub Actions?
I wanted to know what third-party code I was using in my GitHub Actions. I was able to use standard text processing tools and shell pipelines to get a quick tally.
244
If you get the chance, always run more extra network fiber cabling
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
245
246
Quadlet: Running Podman containers under systemd
Finally, Podman has a Docker Compose alternative
247
Understanding Solar Energy
The biggest energy story of the last fifteen years is the rise of solar photovoltaics, also known as solar PV or simply solar panels.
248
The Pain That Is GitHub Actions
Developing a complex CI pipeline with github actions is full of gotchas.
249
Teaching a new way to prevent outages at Google
Read how Google is using System Theoretic Process Analysis (STPA) to analyze pure software systems and discover risks.
250
Preview: Amazon S3 Tables and Lakehouse in DuckDB
We are happy to announce a new preview feature that adds support for Apache Iceberg REST Catalogs, enabling DuckDB users to connect to Amazon S3 Tables and Amazon SageMaker Lakehouse with ease.
251
The real failure rate of EBS
Our experience running AWS EBS at scale for critical workloads
252
Moving away from US cloud services
Relying on US cloud services poses legal and political risks for EU users, so I'm moving away from US cloud services. Here's how and why I did it.
253
Build a Container Image from Scratch
Build a Container Image from Scratch — Danish Prakash
254
But how to get to that European cloud?
The very short version: It has now become clear that European governments can no longer rely on American clouds, and that we lack good and comprehensive alternatives. Market forces have failed to deliver a truly European cloud, and businesses won’t naturally buy as yet unproven cloud services, even when adorned with a…
255
Archival Storage
I gave a talk at the Berkeley I-school's Information Access Seminar entitled Archival Storage . Below the fold is the text of the talk with...
256
uv downloads overtake Poetry for Wagtail users
uv download statistics overtake Poetry for Wagtail users
257
Launching RDAP; sunsetting WHOIS
The Registration Data Access Protocol (RDAP) is the successor to WHOIS, which is being sunsetted on 28 January 2025.
258
Breaking Up with On-Call
This article is about why on-call in it's current state in big-tech is flawed, or how to properly develop software.
259
Some notes on Grafana Loki's new "structured metadata"
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
260
Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
tj-actions/changed-files
261
Making Postgres scale
A war story of manually sharding Postgres across 6 databases under load, and the case for automating the process with a proxy instead of weeks of engineering effort.
262
Migrating from AWS to a European Cloud – How We Cut Costs by 62%
This post describes how we successfully migrated our serverless offering from AWS US-East to OVHCloud North America, reducing our monthly spend from...
263
Azure's Weakest Link? How API Connections Spill Secrets
Binary Security found the undocumented APIs for Azure API Connections. In this post we examine the inner workings of the Connections allowing us to escalate privileges and read secrets in backend resources for services ranging from Key Vaults, Storage Blobs, Defender ATP, to Enterprise Jira and SalesForce servers.
264
Switching to BunnyCDN in Less Than 2 Hours
Update, 2025-04-16: I wrote a follow-up post after about a month of usage, and you can read that here. Given some recent, uh, instability in US politics, and given that everyone likes an underdog, I’ve been looking at European alternatives to my current hosting situation, which is Cloudflare. After looking through…
265
Zero-Downtime Kubernetes Deployments on AWS with EKS
Zero-downtime deployments on Kubernetes on AWS EKS utilizing Pod Readiness Gates, graceful application shutdown and termination delays with code examples in Go
266
You might not need Redis
Redis is arguably the most well regarded tech of all. But many times you do not need Redis. Here are 3 examples from my last 3 jobs.
267
Git without a forge
I’ve written quite a lot of free software in my life. Most of it was from scratch: projects I started myself. So I get to choose where to host them – or rather, I have to choose where to host them.
268
Tailscale is pretty useful
It's probably old news for most, but I've recently started using Tailscale and wanted to share my experience with it.
269
Yoke: Infrastructure as code, but actually
Infrastructure as code, but actually
270
