DevOps & Cloud

Hardening a container hid a permission bug: --cap-drop ALL stripped CAP_DAC_OVERRIDE, and a gate socket silently stopped governing every tool call.

A practical guide to avoiding the last-minute surprises that turn launch day into incident day Continue reading on Medium »

How we moved a production EKS fleet from Crossplane v1 claims/composites to v2 namespaced XRs with no resource recreation, no node rotation, and no downtime — p

A practical Governance, Risk & Compliance (GRC) case study of GitLab using publicly available information Continue reading on Medium »

I spent three iterations on an auto-fix pipeline that still doesn't work reliably. Here's what I...

Picture this: You just spent weeks building an awesome new feature. It’s fully tested and ready to go. But when you hit "Deploy", your… Continue reading on Medi

You change one line in your Dockerfile — swap FROM python:3.11-slim for FROM...

Originally published on the Convox blog Continue reading on Medium »

24th June 2026, Netherlands — OpenTelemetry Collector is often described as the “telemetry pipeline engine” of modern observability. It… Continue reading on Med

Have you ever been using a web app, refreshed the page, and suddenly found yourself kicked back to the login screen? Continue reading on Medium »

This is a complete, copy‑pasteable guide for shipping a backend app to a single Linux server using...

Here's a sentence that has quietly become a lie: "I built an app." You built something that runs on...

I’ve been working full time for a year, but during that year I’ve been “motivated” to use Claude code to do basic code and while I understand the code, I forgot

Outro dia, analisando o painel de uso do Cursor para entender para onde meus tokens estavam indo,...

I’m excited to share that DevOps Open Agent now supports Slack integration  Continue reading on Medium »

A typical Node.js Docker image weighs 1.2 GB. A Go binary image can be 800 MB. Most of that weight...

NomadTTY is a self-hosted web terminal you can open from any phone browser — ESC, sticky Ctrl, Tab, arrows, and F-keys included. No app. No subscription. Just a

I've played a bit with Fastlane solo, but I'm wondering how it normally plays out at larger companies. Do the mobile devs handle the Fastlane scripts, or does i

An interesting problem I ran into recently: qcontroller had been loading Ubuntu 22.04-25.04 images...

If you route through OpenRouter with openrouter/auto, you've traded a decision for a convenience. The...

Your CI/CD pipelines should speak for themselves. Here's how to make developers autonomous with proper logging.

A step-by-step blueprint for configuring external Python libraries in self-hosted deployments. Continue reading on Medium »

Reachability, KEV/EPSS, and expiry-dated ignores — how to cut 847 findings down to 6 Continue reading on Medium »

Over the last two weeks, we solved two massive DevOps problems. First, we stopped deploying manually...

Gitlogs and the lesser know flags that can make you a power git user. Continue reading on Stackademic »

I used to think cloud was just about spinning up servers. My first Azure project changed that completely. Continue reading on Medium »

Seven command-line tools that fixed the slow part of my day, and the one place they all fall apart Continue reading on Medium »

npm has lockfiles, provenance, and signed publishes. WordPress auto-update applies whatever the maintainer pushes, whenever they push it… Continue reading on Me

Modern cloud deployments involve many tools with different lifecycles, creating a heavy burden on engineers. The Kubernetes ecosystem offers a unified Control P

Who's still running Grafana OnCall OSS after archive? I'm think about self-hosted Grafana OnCall, but it's archived now. It's a good idea to use Grafana OnCall?

SDD for Infrastructure as Code breaks into three layers of varying maturity. Only policy-as-code as executable specification genuinely… Continue reading on Medi

SDD for Infrastructure as Code breaks into three layers of varying maturity. Only policy-as-code as executable specification genuinely… Continue reading on Medi

Manual incident response at 2 AM is an organizational failure mode, not a staffing problem. When a bad deployment reaches production, an engineer's phone

Learn to send and receive changes in Git with git push and git fetch. Understand the difference between fetch and pull, how to use --force-with-lease, and why g

Kubernetes has transformed how organizations deploy and manage applications, but while teams often...

THE DOUBT:- I have doubt about developing our app. What we are doing now is that we are hosting our project in vercel and we work on vs code while we push to th

I'm in my 30s and just recently started learning devoos, I genuinely want to know if it's worth it and to be honest it's been a bit overwhelming. Any advice on

From Learning to Shipping — Docker, Graceful Shutdown & ECS Fargate This is the final...

Escape the copy-paste forum traps. Master correct Nginx syntax, systemd overrides, precise RAM mathematics, and kernel debugging on iRexta… Continue reading on

The goal isn’t to teach Linux like a college textbook. The goal is to learn Linux the way you’ll actually use it in production. Continue reading on Medium »

And by viral I mean from $0 to $31. Umami told me Clew Directive got 14 visits last month. AWS told...

Multi-stage builds, distroless images, and the --chown trick we almost missed. Continue reading on Medium »

By introduction of Lambda MicroVMs, what are the most importance and challenging task we can solve with them now? I’m looking for the answers which weren’t poss

A safe deployment is not a deployment that succeeds. It’s a deployment that succeeds and can be reversed. Continue reading on Stackademic »

The safest way to use a third-party OpenClaw skill is to treat it like automation code with money and data access, not like a harmless plugin. After reading rep

If you don’t have enough servers running, your load balancer will have nowhere to send that traffic, and your site will crash. Conversely… Continue reading on M

Not a hype list. These are the three MCP servers I have running right now in Claude Desktop. ...

The problem Every time an ECS service breaks in production, you end up doing the same...