Topics /
Infrastructure & DevOps
The most popular blog posts about infrastructure & devops on Hacker News. 4,375 posts.
Things I set on new servers
There are a number of things you can do to make a server more secure whilst protecting your hosted entities and their users. Here are just three of the many things I do on every new server I commission. I hasten to add that these are not necessarily the most effective or at the top of my list - they are just that: 3…
Engineering Dropbox Transfer: Making simple even simpler
One of the challenges of application engineering within an established company like Dropbox is to break out of the cycle of incremental improvements and look at a problem fresh. Our colleagues who do user research help by regularly reminding us of the customer’s perspective, but so can our friends and family when they…
Murder Mystery: GCC builds failing after sbuild refactoring
This is the story of an investigation conducted by Jochen Sprickerhof, Helmut Grohne, and myself. It was true teamwork, and we would have not reached the bottom of the …
AWS Database Migration Service
Do you currently store relational data in an on-premises Oracle, SQL Server, MySQL, MariaDB, or PostgreSQL database? Would you like to move it to the AWS cloud with virtually no downtime so that you can take advantage of the scale, operational efficiency, and the multitude of data storage options that are available to…
IPv6 WireGuard Peering
Documentation and guides from the team at Fly.io.
Announcing Docker Machine Beta
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
How .NET container images are maintained
An update on using .NET and containers together, learn how to tackle staying safe and keeping your container images up-to-date.
Trigger a Kernel Panic to Diagnose Unresponsive EC2 Instances
When I was working on systems deployed in on-premises data centers, it sometimes happened I had to debug an unresponsive server. It usually involved asking someone to physically press a non-maskable interrupt (NMI) button on the frozen server or to send a signal to a command controller over a serial interface (yes…
Blueprint for a distributed multi-region IAM with Go and CockroachDB
Learn how to scale IAM globally. Ory provides secure multi-region identity solutions.
Scaling Knative to 100K+ Webapps
Render scaled its Knative infrastructure to handle 100k+ web apps, optimizing Kubernetes for free-tier services and reducing CPU usage to improve network performance.
FreeBSD now available on all EC2 instance types
I tried building FreeBSD AMIs for the 32-bit EC2 instance types the same way as I did the 64-bit instances — by defenestrating Windows AMIs — but there was a catch: They wouldn't boot. In fact, when I tried this six months ago, they not only didn't boot, but they didn't even produce any console output to help me…
Podman rootless containers and the Copy Fail exploit
On April 29th CVE-2026-31431 was publicly disclosed at https://copy.fail/ . This vulnerability allows a local unprivileged user to obtain a root shell by running the Python script shared by the author.
Current architectural best practices for LLM applications
In this guide, I will share the standard architecture for data-informed language model applications and explain forthcoming improvements in knowledge retrieval.
How ReadMe Went from SaaS to On-Premises in Less Than One Week
Discover the tech stack used by ReadMe.io. Explore 6 tools across 2 categories.
Introducing Riak 2.0: Data Types, Strong Consistency, Full-Text Search
The Technical Preview of Riak 2.0 is now available for download.
Firecracker: Lightweight Virtualization for Serverless Applications
Serverless containers and functions are widely used for deploying and managing software in the cloud. Their popularity is due to reduced cost of operations, improved utilization of hardware, and faster scaling than traditional deployment methods. The economics and scale of serverless applications…
How to build a distributed throttling system with Nginx, Lua, and Redis
At the last Globo.com’s hackathon, Lucas Costa and I built a simple Lua library to provide a distributed rate measurement system that depends on Redis and run embedded in Nginx but before we …
Don’t use environment variables for configuration
Suppose you need to create a function for adding two numbers together in plain C. How would you write it? What sort of an API would it have?...
The future of electricity is local
I frequently read about proposals for new solar power developments where the resulting power is moved great distances to less sunny places, such as northern Europe from the Sahara, the US North Eas…
Go kit: Go in the modern enterprise
Peter Bourgon has a web site, and this is that web site.
A timesyncd failure and systemd's lack of debugability
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…