271
Turning a Decommissioned iPhone into a UniFi Protect Camera
Why buy a bespoke camera when you can do something much harder instead?
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 321 posts.
272
Configuring Split Horizon DNS with Pi-Hole and Tailscale
Post describing how I've configured pihole to return different results to clients on my tailnet than those on the LAN.
273
Don't sell space in your homelab (2023)
Hanging out in subreddits like /r/homelab, /r/servers, and /r/datahoarder, I see this question asked too many times: I have extra space in my home server, how …
274
Tailscale 4via6 – Connect Edge Deployments at Scale
In this post, we’re highlighting 4via6 subnet routing — a powerful way to extend Tailscale’s mesh across entire edge or customer networks. It’s ideal for scenarios where traditional VPNs struggle, like fleets of robots, sensors, or isolated cloud environments.
275
LLM-D: Kubernetes-Native Distributed Inference
Introducing llm-d: Kubernetes-native distributed LLM inference with KV-cache routing, disaggregated serving, and SOTA performance per dollar. Built on vLLM.
276
OpenTelemetry collector: What it is, when you need it, and when you don't
A practical, no-fluff guide to understanding the OpenTelemetry Collector - what it does, how it works, real architecture patterns (with and without it).
277
What I Self Host
I’ve always liked reading blogs, and have used several feed readers in the past (Feedly, for example). For a long time I was thinking it would be fun to writ...
278
Demonstrably Secure Software Supply Chains with Nix
Discover how Nix can revolutionize your software supply chain security, enabling verifiable integrity and offline rebuilds from source.
279
Why I'm No Longer Talking to Architects About Microservices
I'm done talking about microservices: the term is confusing, discussions are abstract, and without organisational change, microservices are pointless
280
What Are Traces and Spans in OpenTelemetry?
Understand OpenTelemetry traces and spans with real code examples. Instrument Node.js/TypeScript apps for distributed tracing and faster debugging.
281
Some notes on Grafana Loki's new "structured metadata"
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
282
Systemd can be a cause of restrictions on daemons
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
283
On Running systemd-nspawn Containers (2022)
I’d like to talk more about a container technology that I really like that I touched upon in a previous article : systemd-nspawn .
284
Virtualizing Nvidia HGX B200 GPUs with Open Source
This blog post covers how we virtualized NVIDIA HGX B200 GPUs using open-source software. It talks about VFIO passthrough, QEMU PCI topology fixes, large BAR boot stalls, and Fabric Manager partitions.
285
Creating Debian packages from upstream Git
In this post, I demonstrate the optimal workflow for creating new Debian packages in 2025, preserving the upstream Git history. The motivation for this is to lower the barrier for sharing improvements to and from upstream, and to improve software provenance and supply-chain security by making it easy to inspect every…
286
Static as a Server
You wouldn't download a site.
287
How I built this website on a Raspberry Pi
A comprehensive tutorial on how to build a personal professional website on a Raspberry Pi.
288
Serving a half billion requests per day with Rust and CGI
In my previous post Serving 200 million requests per day with a cgi-bin, I did some quick performance testing of CGI using a program written in Go. Go works excellently for CGI programs, for many of the same reasons it works so well for CLI programs and system daemons. But, out of curiosity, I decided to do a bit more…
289
XZ Utils Backdoor Still Lurking in Docker Images
In this blog, we share a new finding in the XZ Utils saga: several Docker images built around the time of the compromise contain the backdoor. At first…
290
The real failure rate of EBS
Our experience running AWS EBS at scale for critical workloads
291
The Cost of Being Crawled: LLM Bots and Vercel Image API Pricing
A misconfiguration that might have cost us $7,000
292
293
Run Nix Based Environments in Kubernetes
Run reproducible, immutable environments in Kubernetes without container images. Faster deploys, SBOMs-by-default, and zero drift with Flox.
294
But how to get to that European cloud?
The very short version: It has now become clear that European governments can no longer rely on American clouds, and that we lack good and comprehensive alternatives. Market forces have failed to deliver a truly European cloud, and businesses won’t naturally buy as yet unproven cloud services, even when adorned with a…
295
Vm.overcommit_memory=2 is the right setting for servers
The Linux kernel has a feature where you can tune the behavior of memory allocations: the vm.overcommit_memory sysctl. When overcommit is enabled (sadly, this is the default), the kernel will typically return a mapping when brk(2) or mmap(2) is called to increase a program’s heap size, regardless of whether or not…
296
Node 20 will be deprecated on GitHub Actions runners
Editor’s note (August 25, 2026): Updated the Node20 removal date to September 23rd, 2026. Editor’s note (February 25, 2026): Updated the migration date to June of 2026. Editor’s note (May…
297
Updated rate limits for unauthenticated requests
To provide a secure and dependable experience on GitHub, we’re rolling out updates to rate limits for requests made without authentication. These changes will apply to operations like cloning repositories…
298
Why Does My eBPF Program Work on One Kernel but Fail on Another?
How to Build Truly Portable eBPF Programs
299
OpenTelemetry protocol with Apache Arrow
We are excited to announce the next phase of the OpenTelemetry Protocol with Apache Arrow project (OTel-Arrow). We began this project several years ago with the goal of bridging between OpenTelemetry data and the Apache Arrow ecosystem. Apache Arrow is a framework designed for zero-copy exchange of structured data…
300
AWS Restored My Account: The Human Who Made the Difference
The untold story of how one AWS employee turned a 20-day nightmare into a lesson in corporate accountability. Sometimes all it takes is one person who actually gives a damn.