A collection of thoughts and experiments that at one point occupied my time, some still do. These are the things happening in my idle cycles.
A few neat tricks to better leverage the capabilities of systemd-nspawn for blazing fast start times in containers launched on-demand.
read more...The essential qualities of software architectures can be lost in a veritable soup of acronyms, cloud provider jargon, and over-engineering. I have recently been working up a simple architecture and routing scheme using HAProxy that is both flexible and scalable.
read more...I previously hinted at the desire for layered security in a small network of computers. WireGuard turns out to be a delightfully easy way to do just that. Here I outline a simplistic configuration that meets all of my own needs for networking two servers.
read more...I have read about Litestream with interest and thought I should finally try it out. The appeal of a lightweight replication mechanism on top of one of my favorite little databases is too great to ignore.
read more...Kubernetes can be confusing. Finally there is an API to take the confusion out of user privilege requests, just drop in this webhook server. It's pure Go and has zero dependencies.
read more...In what I swear is probably the last post about systemd for a while I review a few remaining facets of systemd service files and the broader ecosystem available to administrators.
read more...I previously worked out some safer defaults for services I run on a Debian server exposed to the internet. Here are some further notes on really going overboard.
read more...I have been thinking about how to run different internet-facing services in a way that is secure without being too onerous. This got me reading more about the capabilities built into the operating system.
read more...I have been playing around with TCL and trying it out in a few different projects. While I am brand new to the language I've written up a few notes on the experience so far.
read more...I have been reading more about C programming and casting about for a project I am thinking of writing another static site generator. It is a small, self-contained project with a well known scope and I have real data.
read more...