301
Linux Security Hardening and Other Tweaks
A collection of kernel and userland settings one can change to improve the security and usability of a Linux system. Targeted at Arch, but should work for other distros too.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 354 posts.
302
303
304
Fedora CoreOS Out of Preview
Fedora CoreOS is a new Fedora Edition built specifically for running containerized workloads securely and at scale. It's now available for general use.
305
Autonomous Rust Unikernels in Google Cloud
What if you could reboot an entire server in seconds in response to an active attack and get a brand new memory layout? While not feasible under linux it's an uniquely unikernel feature.
306
Don’t Be Afraid of RAID
I sense this sentiment on the internet that RAID is dangerous, that the likelihood of your RAID array failing during a rebuild is almost a certainty, because hard drives have become so large.
307
Postmortem of the failure of one hosting storage unit on Jan. 8, 2020
On January 8, 2020 at 14:51 UTC, one of our storage units used for our hosting services hosted at LU-BI1 went down.
308
How to put machine learning models into production
The goal of building a machine learning model is to solve a problem, and a machine learning model can only do so when it is in production and actively in use by consumers. As such, model deployment is as important as model building.
309
Pilo: Raspberry Pi-Powered Lights-Out Remote Server Management
The completed Pilo controller, before final installation. The USB capture card and Arduino Nano USB serial are soldered to the underside of the 3B+.
310
Apple Silicon M1 Chips and Docker
Learn from Docker experts to simplify and advance your app development and management with Docker. Stay up to date on Docker events and new version
311
Hosting your entire web application using S3 and CloudFront
Leverage S3 and CloudFront to host your web app in an infinitely scalable way.
312
Kubernetes 1.20
We’re pleased to announce the release of Kubernetes 1.20, our third and final release of 2020! This release consists of 42 enhancements: 11 enhancements have graduated to stable, 15 enhancements are moving to beta, and 16 enhancements are entering alpha. The 1.20 release cycle returned to its normal cadence of 11…
313
AWS Managed Workflows for Apache Airflow
As the volume and complexity of your data processing pipelines increase, you can simplify the overall process by decomposing it into a series of smaller tasks and coordinate the execution of these tasks as part of a workflow. To do so, many developers and data engineers use Apache Airflow, a platform created by the…
314
315
Krustlet, the WebAssembly Kubelet
Announcing Krustlet
316
Moving Away from Travis CI
At rOpenSci, we encourage R package developers to take advantage of Continuous Integration services to automatically check the package on different platforms, with different versions of R. The rOpenSci dev guide dedicates chapter 2 to the topic of Continuous Integration Best Practices, and recommends a few common CI…
317
318
319
Clutch, the Open-Source Platform for Infrastructure Tooling
By Daniel Hochman and Derek Schaller
320
Production-Oriented Development
Throughout my career, I’ve developed some opinions. Some have worn particularly deep ruts, reinforced by years of experience. I tried to…
321
Eliminating cold starts with Cloudflare Workers
A “cold start” is the time it takes to load and execute a new copy of a serverless function for the first time. It’s a problem that’s both complicated to solve and costly to fix.
322
Building Containers Without Docker
In this post I'll outline several ways to build containers without the need for Docker itself including buildkit, kaniko, GitHub Actions, GitLab and Jenkins
323
324
325
AWS’s Elastic Load Balancer is a Strangler
The Strangler is an extremely effective technique for phasing out legacy systems over time. Instead of spending months getting a new system up to parity with the current system so that clients can…
326
In search of a better job scheduler
What if cron and systemd had a baby? Wouldn't it be beautiful?
327
328
329
Repurposing my old Chromebook to a low power home server
Can’t sell it? Repurpose it! It was around 4 years ago when I bought a used, slightly beat up Asus C300 Chromebook from a friend of mine for £50. It served me well, I installed Linux on it and used it to work on some side projects while commuting. However as time passed by, I slowly forgot about it and it ended up in…
330
Moving BBC Online to the Cloud
The story of how the BBC website has been completely rebuilt and moved from datacentres to the cloud.