Tag: devops

A real postmortem: how a forgotten survey-tool container, an uncapped Docker log driver, and rootless networking combined to kill prod for a Monday morning.

etcd powers Kubernetes. Consul is the service-discovery Swiss army knife. ZooKeeper is the grizzled veteran. Here's how to pick a coordination store.

Stop the .env-in-1Password dance. SOPS encrypts secrets per-key, age provides modern crypto, and git stores them safely. Here's how to ship it without footguns.

Zero-trust access for SSH, k8s, and databases — HashiCorp Boundary vs Teleport compared on identity, session recording, and self-host fit.

Expose Docker's Unix socket over TCP so remote tools and dashboards can connect — daemon.json config for Linux and Windows.

Twenty powerful bash one-liners every sysadmin should know—file ops, process hunting, networking, text processing, disk analysis

Compile software on Raspberry Pi or cheap VPS with 512MB–2GB RAM. Swap, parallel jobs, ccache, and swappiness tuning make it work.

Three ways to set env vars in Docker Compose. Only one wins. Here's which and why it breaks your configs.

ENV bakes secrets into layers visible in docker history. Use BuildKit --secret, runtime vars, or .env files.

Build ARM64 and AMD64 images from one machine using Docker buildx. Setup, syntax, pushing multi-arch manifests, and when you actually need it.

The docker compose commands you actually use daily — up, down, logs, exec, pull, and the flags that make them way more useful.

Access services on the host machine from inside a Docker container using host-gateway or host.docker.internal — no hardcoded IPs.