Working notes on software, systems, and security.

Twelve OOMKills in a row on an instance configured to evict. The eviction policy was fine. It just never got a turn.

Workers with no public address of their own, and a default route that reads correctly on a whiteboard and fails silently on the wire.

Handing an agent one broad tool and a polite note about what not to do is a deny-list, and it inherits every problem deny-lists have.

An agent answering with the wrong customer’s data does not look like a failure. It looks like it worked.

Generated code arrives with no uncertainty attached, whether or not any of it was warranted. The reader supplies the confidence.

A client forwarded a suspicious security update email. The domain looked right. Character by character, it was not.

Auditing a dependency tells you about the version you read. It says nothing about the one being published tonight.

IMAPSync is a command-line tool that efficiently synchronizes IMAP mailboxes between two servers. It is designed to copy emails from one mailbox to another without duplicating messages that already exist on the target server. This ensures a smooth and error-free migration process, making it a preferred choice for administrators. Docker is a platform that allows […]

Recently, we set up a custom DNS server based on dnsmasq within our organization to handle internal DNS requests. However, i noticed that our K3S pods were not recognizing the internal hosts defined with the custom DNS server. Initially, i assumed that Kubernetes would use the operating system’s DNS configuration specified in /etc/resolv.conf, but i […]