Tag: devops

Crossplane vs Terraform and OpenTofu for home lab infra: GitOps-native Kubernetes CRDs versus battle-tested HCL, which one actually fits your k3s cluster?

Two years after HashiCorp's BUSL switch and IBM's acquisition, OpenTofu is the mature open-source Terraform fork. Here's the honest state of play.

Keyless signed git commits with Sigstore and Gitsign, no GPG key rot, no passphrase prompts. OIDC-backed ephemeral certs that just work.

Dragonfly turns your container registry into a P2P swarm. Stop hammering one registry with 200 nodes pulling 4GB GPU images at once.

Renovate vs Dependabot for self-hosted teams: config depth, ecosystem coverage, self-host paths, and which bot wins for Forgejo/GitLab shops.

Gitea Actions vs Woodpecker CI: two solid self-hosted CI options, one clear winner for your setup. Compare syntax, runners, footprint, and secrets handling.

ClickHouse can store TB of logs on one node, query in seconds, and outscale Loki and Elasticsearch in raw cost. Here's how to wire it up with Vector and Grafana.

I pointed a parallel swarm of AI agents at 840 technical posts to fact-check and refresh them, the architecture, the token bill, and the guardrails.

Open Policy Agent and Gatekeeper enforce rules across Kubernetes, block privileged pods, require labels, restrict images. Rego basics and real homelab constraints.

Claude Code puts an agentic AI assistant in your terminal for real homelab work, compose files, bash, Ansible, systemd. The honest take on cost and data.

Kustomize patches YAML with overlays. Jsonnet is a real templating language with imports and functions. Here's which K8s manifest tool to pick.

Argo Rollouts uses a Rollout CRD with a slick UI. Flagger watches your Deployment with a Canary CRD. Here's which progressive-delivery tool to pick.