ContentPosts from @jo_setzer..
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Anubis and caddy-docker-proxy

CKANfaced a barrage: 60 requests per second, courtesy of some mischief-maker in Brazil. EnterAnubis. With its SHA256 challenge, it cut through the chaos like a hot knife through warm Brazilian pão de queijo. Now, plugging Anubis intocaddy-docker-proxypractically did itself. The proxy auto-configures.. read more  

Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

1.33: Volume Populators Graduate to GA

Kubernetes v1.33unleashesvolume populatorsfor all to enjoy. Custom resources now power data sources. Say goodbye to pesky resource leaks, mishmash configurations, and sleepy metrics. Prepare for a wild ride of flexibility... read more  

Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Impromptu disaster recovery

K3s reconciler threw a fit. A botched YAML reformat doubled up resources and obliterated the author’s cluster, courtesy of the clumsy hands of language models. It’s a vivid postcard from the island of LLM limitations. Luckily, Hetzner’s system rebuild stepped in to save the day. But it wasn’t painle.. read more  

Impromptu disaster recovery
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

From Edge to Enterprise: The StarlingX Advantage

StarlingXtackles low-latency like a boss, perfect for edge and enterprise clouds. It weaves together real-time Linux and OVS DPDK, all while juggling up to5,000 nodes. It scales effortlessly, sprinting from humblesingle-nodesetups to sprawlingtens-of-thousandsin multi-region clouds. Timing precision.. read more  

From Edge to Enterprise: The StarlingX Advantage
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

v1.33: Fine-grained SupplementalGroups Control Graduates to Beta

Kubernetes v1.33 rolls in a snazzy beta feature: control over supplemental group merging in containers. It sharpenssecurityby exposing those sneaky implicit GIDs. But don't get too cozy—this power comes with strings. You’ll need CRI runtimes that play nice, or your pods will get the boot on unsuppor.. read more  

Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Cutting Kubernetes Costs with kube-downscaler

kube-downscaleris your go-to for scheduling time-based scaling inKubernetes. It dodges HPA’s hiccups for pre-planned workloads. Imagine cron jobs but for replicas. Straightforward, effective, and perfect for trimming costs on snoozing dev environments... read more  

Cutting Kubernetes Costs with kube-downscaler
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

v1.33: Prevent PersistentVolume Leaks When Deleting out of Order graduates to GA

Kubernetes v1.33finally pulls its socks up with storage cleanup. It now respects reclaim policies by wielding finalizers. No more leakingPersistentVolumes, even if you delete PVs like a mad hatter... read more  

Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Uber’s Journey to Ray on Kubernetes

Uber tossed manual ML resource wrangling for a slick Kubernetes-Ray duo, amping up scalability and slashing inefficiencies.With dynamic resource pools, elastic sharing, and smart scheduling, they rev up utilization and demolish GPU waste—no micromanaging required... read more  

Uber’s Journey to Ray on Kubernetes
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

How to build small and secure Docker images for Rust (FROM scratch)

This Dockerfile allows for the creation of minimal and secure Docker images for Rust projects. It utilizes multi-stage builds to avoid unnecessary dependencies and reduces the size of the final image... read more  

Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Podfox: World's First Container-Aware Browser

Podfoxswoops in to transform your browser into a Podman rootless container with a SOCKS proxy—no port forwarding monkey business required. It's like magic for your dev groove. Meanwhile,Homebrewgives container development a twist: it mounts user environments in read-only mode. This way, your favorit.. read more  

Podfox: World's First Container-Aware Browser