181
Kubernetes Exposed: One YAML Away from Disaster
We found two main misconfigurations in Kubernetes clusters belonging to more than 350 organizations openly accessible and largely unprotected.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 341 posts.
182
Make systemd better for Podman with Quadlet
One of the best features of Podman is how well it works with systemd. Podman uses the standard fork/exec model, which is easily adaptable to the systemd syst...
183
OpenTelemetry at Scale: Using Kafka to handle bursty traffic
Learn how to use Apache Kafka as a buffer between OpenTelemetry Collectors for a scalable multi-collector pipeline, with YAML configuration examples.
184
The long life of Apache httpd 2.4
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
185
Testing on production
It might seem like a click baity title but it’s not. Let me explain.
186
Microsoft is failing to deliver emails that mention newclimate.org
Since 17 October, to our knowledge any email with the NewClimate URL (newclimate dot org) in the email body, link, signature, reply header or contained anywhere in an attachment is unjustifiably quarantined by Microsoft email servers without any notice, regardless of who sends or receives the email.
187
Uber migrates microservices to multi-cloud platform running Kubernetes and Mesos
Each and every week, Uber’s 4,500 stateless microservices are deployed more than 100,000 times by 4,000 engineers and many autonomous systems. These services are developed, deployed, and operated by hundreds of individual teams working independently across the globe. The services vary in size, shape, and…
188
I don't want to host services but I do
I don't want to self-host and think most individuals shouldn't host services for others. Yet I do it anyway, and even teach people how to.
189
Gigantic heat caverns in Mustikkamaa have now been filled with water (2021)
The filling of underground heat caverns in Mustikkamaa with water has been completed this week, and the use of the heat caverns for heating homes in Helsinki is a step closer.
190
Podman v4.6 Introduces Podmansh: A Revolutionary Login Shell
Introduction In the ever-evolving landscape of container technology, Podman’s latest version, v4.6.0, includes a feature that promises to be a game-changer for system administrators: Podmansh…
191
Passive Solar Water Desalination
I know we are supposed to be worried about the world supply of fresh water. I have been hearing that at least for the last 40 years, and the statistics are alarming. According to the Global Commission on the Economics of Water: "We are seeing the consequences not of freak events, nor of population growth
192
Working on Multiple Web Projects with Docker Compose and Traefik
Docker Compose is a brilliant tool for bringing up local development environments for web projects. But working with multiple projects can be a pain due to clashes. For example, all projects want to listen to port 80 (or perhaps one of the super common higher ones like 8000 etc.). This forces developers to only bring…
193
194
OpenTTD's Infrastructure in 2023
This post is part of a two-part series, of which this is the first. In this post, we go a bit into the infrastructure that runs OpenTTD, from BaNaNaS to our main website. The second post will explain a bit about the migration we just did to get to this infrastructure.
195
Writing a Kubernetes Operator
Basic introduction to Kubernetes Operators and Controllers, with a tutorial on creating an Operator in Rust
196
Faster filesystem access with Directfs
Directfs is now the default in runsc. This feature gives gVisor’s application kernel (the Sentry) secure direct access to the container filesystem, avoiding expensive round trips to the filesystem gofer. Learn more about this feature in the following blog that was originally posted on Google Open Source Blog .
197
How we manage 200 open-source repos
7 lessons we've learned while managing 200+ open-source repositories - automation with a human touch.
198
A minimum complete tutorial of Linux ext4 file system (2017)
This is a complete tutorial for understanding the basics of Linux ext4 file system.
199
Ok, Cloudflare I am leaving
Music and blogging
200
The Nano ESP32
The Nano ESP32 introduces a new microcontroller architecture to the Nano family. The Nano ESP32 embraces one of the favorite IoT standards.
201
202
789 KB Linux Without MMU on RISC-V
A guide on building a tiny Linux (only 789 KB) that requires no MMU and deploying it on a RISC-V system, with custom userspace code.
203
HAProxy is not affected by the HTTP/2 Rapid Reset Attack
HAProxy products are unaffected by CVE-2023-44487, which could allow a DoS attack against web servers, reverse proxies, and more. Stay tuned for updates.
204
205
Notes on running a single-person Mastodon server
Notes on using a single-person Mastodon server
206
DevOps uses a capability model, not a maturity model
As DevOps adoption increases, it becomes more likely the certification industrial complex will try to apply the wrong model.
207
208
S3 Express Is All You Need
The future of modern data infrastructure is object storage.
209
Fastmail 30 June outage post-mortem
A partial network outage occurred at Fastmail on June 30th, 2023. Most did not notice, but it was severe for the directly affected 3-5% of our customers.
210
The cost of cloud, a trillion dollar paradox (2021)
The pressure the cloud puts on margins can start to outweigh the benefits you scale and growth slows. Understand how much market cap is being suppressed by the cloud to help inform the decision-making framework on managing infrastructure as companies scale.