Lately I’ve been trying to find (and understand) the limits of time syncing between Linux systems. How accurate can you get? What does it take to get that? And what things can easily add measurable amounts of time error? After most of a month (!), I’m starting to understand things. This is kind of a follow-on to a…
Tailscale Services is a new way to define available resources on your network and expand the granularity of your access controls to resources that may not have Tailscale installed on them.
Don’t get me wrong, I understand that they’re essential for large fleets of services with fast-changing software and teams of oncallers working around the clock to understand the complex ways that complex systems fail… but my stuff doesn’t change that often, failures are mundane and low-scope, and I’m the only person…
You only live once.
Lessons learned from becoming the unexpected face of a npm supply-chain attack.
So, I originally planned for this to be on my premium newsletter, but decided it was better to publish on my free one so that you could all enjoy it. If you liked it, please consider subscribing to support my work. Here’s $10 off the first year of annual.
For one of my network storage PC builds, I was looking for an alternative to Flatcar Container Linux and tried out NixOS again (after an almost 10 year break). There are many ways to install NixOS, and in this article I will outline how I like to install NixOS on physical hardware or virtual machines: over the network…
Recently I've been playing around with FreeBSD in a virtual machine. The reason for this is that (if all goes well) some time in December my new Framework laptop will arrive, replacing my current X1 Carbon that is starting to show signs of old age (e.g. a keyboard where certain keys don't always work). Framework in…
How mobile push notifications currently bring centralization to decentralized services, and how we can avoid it, even for mainstream configurations. Published the 31/01/2025 This post will focus on Android. We all know decentralized applications: emails, Mastodon (and the Fediverse), Nextcloud and other clouds, Git…
In distributed systems, one of the fundamental challenges is knowing whether a node or service is alive and functioning properly. Unlike monolithic applications, where everything runs in a single process, distributed systems span multiple machines, networks, and data centers. This becomes even glaring when the nodes…
After all, why not? Why shouldn't I put a dumb Temu weather station on the Internet?
[BROKEN LINK: blog/google-cloud-s-outage-should-not-have-happened-and-they-seem-to-be-missing-the-point-on-how-to-avoid-it-in-the-future.pre-processed.org], another global IT outage happened (dèjá vu strikes again in our industry). This time at cloudflare(Prince 2025). Again, taking down large swaths of the internet…
TLDR: I wanted to generate an up-to-date disk image for a Rock Pi 4 using Yocto that included CUPS and Docker to both get a better understanding of Yocto …
Maybe you, yes you, should run a Certificate Transparency log. It’s cheaper, easier, and more important than ever.
By: Cheng Xie, Bryan Shultz, and Christine Xu
Learn about the architectural innovations we used to build a 130,000-node Kubernetes cluster, and the trends driving demand for these environments.
Quick demonstration of using User Mode Linux (UML) to run a Linux VM inside Linux's userspace, without additional VM software or even root permissions
A list of OWASP's Non-Human Identities Top 10 risks for 2025
On hosting images without the price tag.
SourceFS - a high-performance virtual filesystem that builds Android 9× faster, cuts compute costs by 14×, and reduces disk usage by 83× — unlocking a new level of developer productivity.
Print your own 5-bay N5 Mini NAS! Inspired by the Minisforum N5, this 175mm x 175mm design fits most small beds—use any mini PC you prefer.
A guide to maximizing the utilization of GPUs, from cloud allocations to FLOP/s.
We reverse engineered GitHub Actions cache internals to transparently route cache requests through our faster, colocated cache. This delivered up to 10x faster cache performance for some of our customers, with no code changes required and no need to maintain forks of upstream actions.
The iximiuz Labs origin story: five years of technical blogging followed by six months of active development resulted in an online learning-by-doing platform for DevOps, SRE, and Platform Engineers.
This article is about why on-call in it's current state in big-tech is flawed, or how to properly develop software.
The internet has been speculating the past few days on which crypto company spent $65M on Datadog in 2022. I confirmed it was Coinbase, and here are the details of what happened.
Instrument your CI/CD pipelines with OpenTelemetry. A step-by-step guide to capturing GitHub Actions data via the Collector.
Before you default to microservices, weigh hidden costs and consider a modular monolith or SOA. Learn when Docker delivers consistency and scale—without sprawl.
Electricity has started flowing through a deep-level tube train sized tunnel running through South London.
