Join us

ContentUpdates and recent posts about werf..
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

How to catch GitHub Actions workflow injections before attackers do

GitHub Actions injections areone of the most common vulnerabilities in projects. Use CodeQL to scan workflows and protect against these risks effectively... read more  

Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Exhausted man defeats AI model in world coding championship

A weary-eyed Polish coder,Przemysław Dębiak, bested an OpenAI model in a grueling 10-hour face-off, reminiscent ofJohn Henry’sepic duel against the steam-powered behemoth... read more  

Exhausted man defeats AI model in world coding championship
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Understand CPU Branch Instructions Better

Branch prediction matters. Why? About a quarter of instructions are branches, and modern CPUs nail an accuracyabove 90%. Yet, those often-pesky branches can choke CPUs, stalling instruction flow. So, take a wrench to yourif-else logic. Trim indirect branches whenever you can—your CPU will thank you... read more  

Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Containers: Everything You Need To Know

cgroupsand namespaces anchor Linux containers, isolating resources and processes like gatekeepers with a mission. On macOS and Windows, these containers ride in VMs withWSL2orLinuxKit, putting on their "welcome to the virtual world" hats. EnterrunC, executing OCI-built images with isolation flair, w.. read more  

Containers: Everything You Need To Know
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

How Go 1.24's Swiss Tables saved us hundreds of gigabytes

Uncovered a memory regression inGo 1.24. Pored over memory patterns in countless pods like a detective with too much caffeine. Pinpointed sneaky allocation blunders... read more  

Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Lessons from scaling PostgreSQL queues to 100K events

PostgreSQLjuggles 100,000 events per second. Just needs some index wizardry and query twerking. The problem? Table bloat and Write Amplification. Gross. Enter the mightyCOPY—it bulldozes through bulk data, politely ignoring the usualInsertdrag. And those recursiveCTEs? They pull off loose index scan.. read more  

Lessons from scaling PostgreSQL queues to 100K events
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Parsing 1 Billion Rows in Bun/Typescript Under 10 Seconds

Buntries to swallow files over 4GB and promptly chokes. The culprit? ItsBuffercaps out at 4GB. The fix? Slice files into chunks under 4GB but keep the buffer lean, no more than 128KB, to keep things zippy. Pull out the big guns—workers. This move fires up all CPU cores, slashing processing time from.. read more  

Parsing 1 Billion Rows in Bun/Typescript Under 10 Seconds
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

The Micro-Frontend Architecture Handbook

iframes: Secure and isolated, but clunky as dial-up. Best for legacy cleanup missions.Web Components: Native and framework-agnostic, perfect for reusable UI with Shadow DOM flair.single-spa: Juggles multiple SPAs with the finesse of a circus, though it gets chatty.Module Federation: Real-time module.. read more  

The Micro-Frontend Architecture Handbook
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Death by a thousand slops

By 2025,AI slopwill infect20%of curl's security submissions. Meanwhile, a mere5%reveal actual threats. Cutting the$90,000bounty might fend off the slopsters, but it'll scare away the real wizards, too... read more  

Death by a thousand slops
Link
@faun shared a link, 8 months, 3 weeks ago
FAUN.dev()

Scalability is not performance

Boostingscalabilityin distributed systems isn't just a mad dash for speed. It's about morphing resources to tackle shifting demand. Nail scalability, and you balance infrastructure costs with job handling efficiency, all while juggling resource utilization at a sweet spot around 0.5. Crave a drama-f.. read more  

Scalability is not performance
werf is a CNCF Sandbox CLI tool to implement full-cycle CI/CD to Kubernetes easily. werf integrates into your CI system and leverages familiar and reliable technologies, such as Git, Dockerfile, Helm, and Buildah.

What makes werf special:

- Complete application lifecycle management: build and publish container images, test, deploy an application to Kubernetes, distribute release artifacts and clean up the container registry.
- Ease of use: use Dockerfiles and Helm chart for configuration and let werf handle all the rest.
- Advanced features: automatic build caching and content-based tagging, enhanced resource tracking and extra capabilities in Helm, a unique container registry cleanup approach, and more.
- Gluing common technologies: Git, Buildah, Helm, Kubernetes, and your CI system of choice.
- Production-ready: werf has been used in production since 2017; thousands of projects rely on it to build & deploy various apps.