SumGuy's Ramblings
The art of wasting time.
Docker, self-hosting, AI/LLM, Linux, and DevOps — explained by someone who learned the hard way. No fluff, no enterprise jargon, just practical stuff that actually works on real hardware.
Recent Posts
-
Goldilocks + VPA: Right-Size Pods Without Guessing
Stop guessing Kubernetes pod resource limits. Goldilocks + VPA analyze real usage and recommend exactly what CPU and memory your containers need to run.
11 min read -
Capsule: Multi-Tenancy for Home Lab k3s
Stop handing out cluster-admin access to everyone. Capsule gives k3s lab tenants real namespace isolation without the overhead of spinning up vCluster.
10 min read -
Sigstore + Gitsign: Signed Commits Without GPG Pain
Keyless signed git commits with Sigstore and Gitsign—no GPG key rot, no passphrase prompts. OIDC-backed ephemeral certs that just work.
9 min read -
Sealed Secrets vs External Secrets Operator
Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best — home lab cluster or production multi-tenant setup?
10 min read -
Mixture of Experts (MoE) for Self-Hosters, Demystified
MoE LLMs like Mixtral and DeepSeek-V3 run 70B-class quality on 7B-ish active params. Here's how sparse activation works and how to run it at home.
10 min read -
Dragonfly: P2P Container Image Distribution at Scale
Dragonfly turns your container registry into a P2P swarm. Stop hammering one registry with 200 nodes pulling 4GB GPU images at once.
10 min read -
Python Libraries Worth Your Time in 2026
The Python libraries actually worth your time in 2026: data tools, ML frameworks, and CLI kit, plus which ones earn a permanent spot in your home lab.
13 min read -
Atuin: Shell History That Actually Works Across Machines
Atuin replaces your broken $HISTFILE with a SQLite DB, fzf-style search, and optional E2E-encrypted sync across every machine you own.
10 min read -
Cilium on k3s: When eBPF Networking Pays
Replace flannel with Cilium 1.19 on k3s for eBPF routing, Hubble observability, WireGuard encryption, and L7 network policies — here's when it pays off.
11 min read -
k3s + Tailscale: Cluster Across Two Sites
Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric — home lab server plus cloud VPS, one single kubectl context.
10 min read -
Renovate vs Dependabot: Self-Hosted Dependency Bots
Renovate vs Dependabot for self-hosted teams: config depth, ecosystem coverage, self-host paths, and which bot wins for Forgejo/GitLab shops.
11 min read -
KubeVirt on k3s: VMs Next to Pods
Run real KVM virtual machines as Kubernetes resources on k3s. One control plane for pods and VMs — no more juggling Proxmox alongside your cluster every day.
10 min read
