1621
Using Nginx and UWSGI
Shop a wide selection of domains at HugeDomains.com. Find the right domain name today.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,839 posts.
Infrastructure & DevOps
Any year
1622
1623
Introduction to UEFI HTTP(s) Boot with QEMU/OVMF
The historic go-to solution for network booting is PXE. PXE is based on DHCP and TFTP. It is tricky to correctly configure, even trickier to make it highly available and good luck with the security with this clear-text unsigned protocol.
1624
SmartDataCenter and Manta are now open source
Today we are announcing that we are open sourcing the two systems at the heart of our business: SmartDataCenter and the Manta object storage platform . SmartDataCenter is the container-based orchestration software that runs the Joyent public cloud ; we have used it for the better half of a decade to run on-the-metal…
1625
Briar and Bramble: A Vision for Decentralized Infrastructure
What if we could build secure systems that didn't depend on central servers or even Internet access to let people collaborate? What would a system like this mean for political organizing, disaster relief, or even civic infrastructure? The Briar app and the Bramble framework are an attempt to find out.
1626
Unprivileged Docker Builds – A Proof of Concept
I work at a very ‘locked-down’ enterprise, where direct access to Docker is effectively verboten.
1627
Docker in Production: A History of Failure (2016)
Introduction My first encounter with docker goes back to early 2015. Docker was experimented with to find out whether it could benefit us. At the time it wasn’t possible to run a container [i…
1628
Self-host your static assets (2019)
Why is it so much better to self-host your static assets?
1629
How platform engineering works
Lessons learned in my first year as a platform engineer.
1630
The AWS EC2 Windows Secret Sauce
AWS EC2 Secret sauce. How AWS provisions Windows EC2 in the cloud. Instance Pool.
1631
AWS’s Elastic Load Balancer is a Strangler
The Strangler is an extremely effective technique for phasing out legacy systems over time. Instead of spending months getting a new system up to parity with the current system so that clients can…
1632
1633
The 300% Production Problem
Earlier this year, I attended CfgMgmtCamp in Ghent and listened to Adam Jacob’s “What if Infrastructure as Code never existed” keynote. Note: I’d like to extend a huge thanks to
1634
In search of a better job scheduler
What if cron and systemd had a baby? Wouldn't it be beautiful?
1635
1636
1637
1638
Micro-monolith anti-pattern
Microservice-based architecture gains popularity every day. This approach has many advantages. The most important advantages include independent deployments, shortened and simplified deployment pipelines, limited communication between teams, and technology freedom. These core advantages support the quick delivery of…
1639
Selfhosting on Localhost
As a software engineer with a bit of job-induced paranoia, I love the idea of escaping the claws of big tech via self-hosting. In recent years, a plethora of amazing free and open source projects have emerged, providing alternatives to everything from Dropbox and iTunes to Android Home. However, I don’t want to manage…
1640
Who's at the Helm?
Or, how to deploy 25+ CVEs to prod in one command!
1641
Grep one-liners as CI tasks
Leveraging grep's exit status and output for simple code checks
1642
Using HTTP/2 Cleartext for a server in Go 1.24
I'll give a brief outline of how to enable HTTP/2 cleartext (h2c) in a Go API server when you are using Go 1.24 or newer. This is useful in Cloud Run environments, which handles TLS termination but can take advantage of HTTP/2 features.
1643
But how to get to that European cloud?
The very short version: It has now become clear that European governments can no longer rely on American clouds, and that we lack good and comprehensive alternatives. Market forces have failed to deliver a truly European cloud, and businesses won’t naturally buy as yet unproven cloud services, even when adorned with a…
1644
Revisiting How We Put Together Linux Systems
Posts and writings by Lennart Poettering
1645
1646
1647
1648
The Linux kernel has been accidentally hardcoded to a maximum of 8 cores
TL;DR This doesn’t mean that the scheduler can’t use more than 8 cores. The scheduler controls how to allocate tasks to available cores. How to schedule particular workloads efficiently…
1649
Serving a website from a Git repo without cloning it
It's fairly common to use git repositories as a vehicle for serving websites. The webdev pushes their changes to some branch of a publicly available git repository, and some web server somewhere serves the current tip of that branch as the website. Github Pages would be the most famous example of this.
1650
Block web scanners with ipset and iptables
Anybody who runs an internet-facing webserver has seen their fair share of spammy scanners in the logs. It varies server to server, but some of mine get up to 15,000 scans per day. Almost all of these are harmless network mappers, but they still annoy me. Many are compromised hosts or belong to hackers & organized…