Topics /
Infrastructure & DevOps
The most popular blog posts about infrastructure & devops on Hacker News. 4,374 posts.
How to Escape a Container
Panoptica by Outshift delivers advanced cloud-native security insights to help teams protect modern applications and infrastructure at scale.
OpenWrt 22.03
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
Systems Monitoring with Prometheus and Grafana
The evolution of systems monitoring technology decisions and practices for multi-machine Hyperfeed and predictive technology.
Setting Up an Ad-Blocking VPN with WireGuard and Pihole
This guide will walk you through the setup of a remote machine that will act as a personal VPN server at the cost of 3 to 5 USD per month. We will also configure it to act as a DNS resolver that will automatically block spam, tracking, advertising and malware domains on all of your connected devices.
Codecov Bash Uploader compromised
Update 4/29/2021 3PM PT : Through our investigation, we now have additional information concerning what environment variables may have been obtained without authorization and how they may have been used. Affected users can view details within the Codecov application. Additionally, we have posted our most up-to-date…
Solar Shed Summary: My Off Grid Office
A few months ago I moved to a few acres in the country, and needed somewhere to work - so I built myself a solar powered off grid office out of a Tuff-Shed Pro Studio! On one side, I’ve built a great desk corner with plenty of power and more than enough AC to keep me cool when it’s over 100F out.
Intel Virtualisation: How VT-X, KVM and QEMU Work Together
VT-x is name of CPU virtualisation technology by Intel. KVM is component of Linux kernel which makes use of VT-x. And QEMU is a user-space application which allows users to create virtual machines.…
Announcing Envoy: C++ L7 proxy and communication bus
Today we are incredibly excited to open source Envoy, our high performance C++ distributed proxy and communication bus designed for large…
Six day and IP address certificate options in 2025
Update: January 15, 2026 Six-day and IP address certificates are now generally available. See 6-day and IP Address Certificates are Generally Available for details. This year we will continue to pursue our commitment to improving the security of the Web PKI by introducing the option to get certificates with six-day…
Dear AWS, please let me be a cloud engineer again
I’m an AWS Serverless Hero, principal engineer at an AWS centric logistics company, and I build and maintain the AWS News Feed. It’s fair to say that I am very interested in everything AWS does. Bu…
RSS is back as an underpinning to SlackOps
RSS is the API they couldn't kill. It's back stronger than ever as an underpinning of SlackOps in many organizations.
Backblaze Hard Drive Stats Q3 2019
A problem that would have been discovered in the future would now be captured by the SMART stats when the process reads that section of disk today.
From Kafka to ZeroMQ for real-time log aggregation
Software - shaken, not stirred
Widespread exploitation of critical remote code execution in Apache Log4j
On December 10, 2021, Apache released a fix for CVE-2021-44228, a critical RCE vulnerability affecting Log4j that is being exploited in the wild.
AMD EPYC processors come to Google, and to Google Cloud
Google is using the new 2nd Gen AMD EPYC processor for its own workloads, and will offer VMs based on the chip to Google Cloud customers.
Cache-Control: immutable
About one year ago our friends at Facebook brought an interesting issue to the IETF HTTP Working Group - a lot (20%!) of their transaction...
A few ops lessons we all learn the hard way (2020)
Ops is hard. What have learned so far?
From 30 to 230 Docker containers per host
I could not find much information on the interwebs how many containers you can run per host. So here are mine and the issues we ran into along the way.
Making a micro Linux distro (2023)
A guide on building a simple Linux distribution from scratch. Detailed guide on building the kernel and the init process. Finally, a little distribution is built with u-root that is capable of connecting to the Internet.
Cloud services like AWS or Google Cloud Platform may be the wrong choice
Why choosing a popular cloud service, like AWS or Google Cloud Platform, may be the wrong choice for you and what to do instead.
Rocky Linux 10 Will Support RISC-V
🏗️ Rocky Linux 10 Will Support RISC-V! We're excited to announce that Rocky Linux 10 will officially support RISC-V! Thanks to the incredible work of...
Spotify Optimized the Largest Dataflow Job Ever for Wrapped 2020
In this post we’ll discuss how Spotify optimized and sped up elements from our largest Dataflow job, , for using a technique called Sort Merge Bucket (SMB) join. We’ll present the design and implementation of SMB and how we incorporated it into our data pipelines.