LATEST

kubernetes secrets

exploring kubernetes secrets from the kubelet's perspective
quality of service and oom in kubernetes

into the details of resource reservation and oom killing
containerd - concourse runtime up to speed

an overview of containerd (internal Concourse chat)

How to set up a Private Docker Registry using AWS S3

Go through the process of creating a Terraform configuration for deploying a Docker registry to an instance making use of IAM roles.
Blocking EC2 Metadata service from Docker containers in AWS

Check out how to make sure Docker containers running in AWS are unnable to access the EC2 metadata service.
How to set up AWS EFS across multiple availability zones using Terraform

Having an AWS EFS file system over multiple availability zones using Terraform is not complicated. Check out one way of doing it.

Blocking ingress traffic to Docker swarm worker machines

Once a Docker Swarm Mode cluster is formed, all nodes participate in the routing mesh and accept ingress traffic. Check out how to block that feature.
How to set up a Private Docker Registry using AWS S3

Go through the process of creating a Terraform configuration for deploying a Docker registry to an instance making use of IAM roles.
Retrieving Docker Registry metrics using Prometheus

Docker registry used not to have a Prometheus exporter by default. Check out how to make use of it in the development branch.

glibc and golang - an interesting mix

exploring what glibc is, what ISO C and POSIX covers, and why golang might use glibc for some standard libraries.
A UDP server and client in Go

Getting from Golang's net package down to the Linux kernel methods invoked when UDP messages are sent.
Retrieving the full path of a process on MacOS (and exploring procfs)

Getting the absolute path of process on a MacOS machine might not be as simple as in Linux.

Using HAProxy maps with Access control lists (acl)

HAProxy frontends can have their logic simplified by using maps. Check out how to tie maps with ACLs to improve routing.
Making HAProxy respond 200 OK to health checks

Sometimes you need HAProxy to have a special frontend to return 200 OK when a request is made for health-checking purposes. Check out three ways of doing it.
Replacing HAProxy ACLs by HAProxy Maps

HAProxy maps can reduce the complexity of haproxy configurations by allowing you to define map lookup logic. Check out how to remove ACLs in favor of maps.

a standalone kubelet with containerd

installing containerd and getting a sole kubelet to create pods via CRI
failed to locate iptables

kernel tracing to figure out a little mistake
a practical look into overlayfs

how to use overlayfs and some analysis of its performance impact in certain situations

How Linux creates sockets and counts them

A deep dive into what goes under the hood in the Linux kernel when you can the socket system call
A UDP server and client in Go

Getting from Golang's net package down to the Linux kernel methods invoked when UDP messages are sent.
Blocking ingress traffic to Docker swarm worker machines

Once a Docker Swarm Mode cluster is formed, all nodes participate in the routing mesh and accept ingress traffic. Check out how to block that feature.

tracing builds in Concourse

what if we could use distributed tracing tools to better understand our builds?
a very quick intro to prometheus

a lightning talk on Prometheus
Retrieving the full path of a process on MacOS (and exploring procfs)

Getting the absolute path of process on a MacOS machine might not be as simple as in Linux.

tar and permission bits

exploring how tar deals with uid and gids when archiving and extracting under different types of users
Passing the results of a command as a file to another script

Bash process substitution can make you not depend on processes expecting input from the standard input. Learn how to supply the result of a script as a temporary filename for another command.
Measuring HTTP response times with cURL

Without getting out of your current shell and installing other utilities, give cURL a try to measure response times - it can do it.

Notes from learning to build stuff.