The fact that there isn't just one #Kubernetes distro, one filesystem, one package manager, one container runtime, all under the control of one company is a *feature* and not a bug. Aggressive vendor lock-in strategies* just don't work as well. Users having a choice to migrate and to get help from other users to migrate if a vendor doesn't work out is a *good thing*. If someone gets too greedy or shuts down the shop, we can migrate or fork and carry on.
*Android being a clear exception here.
Throwing this out there, I am still available for work! If you have something #Web related, #Nix / #NixOS related, or #Kubernetes / #Containers related then I would love to chat!
You can find more about my background and projects on my website (which also includes contact information): https://jakehamilton.dev
Cluster Rebuild Project
Ok, I'm getting close to having all the easy apps migrated
I'll try and get another block today
One new thing I've been adding as I go is a disable of host user namespace where possible:
See here [kubernetes.io] and here [kubernetes.io]
This mitigates a ton of known and future container escapes and other high/critical vulnerabilities. It also means I can relax a bit on containers that run as root IF they can disable host user NS... root in the container does not map to host root.
It'll be harder on helm installed apps as many won't have a setting for it. Also, I learned it kinda unsurprisingly does not work with NFS mounts for media
#Kubernetes #Homelab
Lol the kubernetes slack mods pinged @channel for users saying gtfo if you not active cause we hit max user limits.
Also this is why you use forums instead of chat for support and discussions.
So if, say, I want to learn about containers, kubernetes, and co. *from zero*, how should I go for it?
Will have to learn it for work purposes and while I do know some programming I'm not from that kinda background so anything that assumes very little is much appreciated 
I wrote a short blog post on how I set up my cluster to listen for ACARS/VDL2 messages (digital aircraft communications) and forward them to @acarsdrama (run by @SecureOwl) so it can have more coverage to pick up those juicy messages. Total cost was about $60USD (minus the cluster which I already had lying around), but I am buying more radios to pick up more messages.
Let me know if there's any details you're interested in knowing more about!
https://tyzbit.blog/receiving-acars-vdl2-messages-and-feeding-them-to-acarsdrama
New docker hub rate limits!
https://docs.docker.com/docker-hub/usage/
10/hr for a single IP if unauthenticated
40/hr if logged in
That is a massive reduction and can easily prevent even some smaller setups from deploying smoothly
#Homelab #Kubernetes #Docker #Selfhosted
På lördag blir den kungliga hufvudstaden ärad av min närvaro när Open Infra Forum har 10-års-jubileum! Vem hade kunnat säga nej när gästlistan inkluderar ingen mindre än självaste @bagder !
kubespray, kubeadm init, kind create etc
Canonical veröffentlicht Kubernetes LTS mit 12 Jahren Support
Die Welt der Cloudinfrastrukturen gilt als schnelllebig. Da überrascht Canonicals Ankündigung einer LTS-Version von Kubernetes mit 12 Jahren Support.
I just added a #TalosLinux 1.9.3 (#Talos) #Vagrant box to the #ARM64 collection. This allows you to run Talos on your #AppleSilicon #MacBook. This is control-plane only, but you can patch the manifest to also run workloads.
You can find it right here:
Image: https://portal.cloud.hashicorp.com/vagrant/discover/gyptazy/talos1.9.3-arm64
Config: https://cdn.gyptazy.com/files/os/talos/vagrant/
All #ARM64 boxes: https://gyptazy.com/vagrant-images-for-apple-silicon-m1-m2/
#FediHire #GetFediHired 
I'm a #Programmer/#SoftwareEngineer. I'm most fluent in #Python, have some basics in #Java and #C++, but I'm also taking up new languages like #Javascript and others in my eternal journey of getting better and minimising the impostor syndrome that befalls pretty much all programmers (I feel). I'm also very experienced in #CloudNative/#DevOps technologies, and have been the one devising solutions and maintaining infrastructure in a fast-paced startup environment in my previous employment.
I'm passionate in what I do and those that know me here or IRL would know that I'm always yapping about the things I'm learning or working on - I love discussing them, and I love helping people out - esp those on the same boat as me.
This passion has led me into writing and maintaining tons of #FOSS projects like Mango [github.com]: a content distribution framework based on #Django for #Mastodon and #Bluesky that powers various bots of mine like @lowyat@mastodon.social and @waktusolat@mastodon.social, Charts [github.com]: a #Helm chart repository for an easy and reproducible deployment strategy for all my projects and everything else I self-host on my #homelab, and Orked [github.com]: O-tomated #RKE2 distribution, a collection of scripts I wrote that are comprehensively documented to enable everyone to self-host a production-grade #Kubernetes cluster for absolutely free in their homes.
I'm based in Malaysia, but I'm open to just about any on-site, hybrid, or remote job opportunities anywhere. In the meantime though, I'm actively looking for a job in countries like #Japan and #Singapore, in a bid for a desperate lifestyle change. I've linked below my Portfolio [gitlab.com] (which you too, could self-host your own!), for those who'd wish to connect/learn more of me. Thank you 
@honze_net I absolutely agree.
I haven't posted publicly about this yet (I plan to do a write-up soon) but pix.lgbt and homestead.social are built on a cluster (all on Raspberry Pis) that I built to be fully mobile (literally has a handle on it), with a solar powered battery backup, and dual mobile WANs (fully encrypted over Wireguard VPN) in case we need to flee.
We're not going anywhere!
(someone told me to post in French too so here it is!)
Bonjour !
Je suis Adrian, et je suis à la recherche d'un emploi au #Québec (ou depuis le Québec). J'ai déjà mon visa de résident permanent.
J'ai de l'expérience dans le développement et la maintenance d'application web et d'API, dans le design de système et dans le #DevOps.
Professionnellement parlant, les langages et technologies que j'utilise sont #Elixir, #Phoenix et #LiveView, du #SQL et du #NoSQL, #NodeJS, #JavaScript, #TypeScript et #Python ; et côté DevOps des pipelines de CI/CD avec Github Actions, #Docker et un peu de #Kubernetes et d' #AWS.
J'ai également participé à l'innovation dans mon entreprise précédente, en cherchant des outils, des librairies, des algorithmes et des technologies et pour nos produits et pour l'expérience développeur. Un aperçu de mes écrits sur mon blog est disponible: https://blog.adrianc.eu
J'ai de plus écrit de la documentation technique et non technique, ainsi que donné des présentations internes et à des Meetups.
Vous m'avez peut-être aussi aperçu sur plusieurs serveurs Discord autour d'Elixir, Bluesky (@adrianc.eu) ou Twitter/X ; à partager des nouveautés dans la tech, à aider des personnes, ou juste à discuter !
Je suis ouvert à du temps plein, pour d'autres types de contrat je vais avoir un peu de recherche et d'administration à faire avant.
Je cherche un emploi en Elixir mais pas que, et je suis plus qu'ouvert à apprendre d'autres technologies si je ne les connais pas déjà.
Commentez ou contactez moi pour plus d'informations, comme mon Github ou mon CV !
DM me for more info, like github link, my resume or anything :)
Boosts, réponses et DM bienvenus!
Hi!
I'm Adrian, a FullStack #Developer looking for a job either in #Québec (or from it if you allow for remote work). I already have a permanent and open visa
I have experience building and maintaining web apps and APIs, designing systems, doing #DevOps and a bit of #BigData, #MachineLearning and #IoT
I'm experienced using #Elixir, #Phoenix, #LiveView, #NodeJS, #TypeScript, #Fastify, #Express and #Python ; and on the DevOps side in CI/CD pipelines (either #GithubActions and Gitlab CI/CD), #Docker and a bit of #Kubernetes
I was tasked with a lot of the #innovation happening in my previous company, researching tools, librairies, patterns or general technologies either for our own #DeveloperExperience or for our products
I also wrote a lot of technical and non technical documentation and internal presentations, and even participated in a few meetups. You can read some of my writing on my blog: https://blog.adrianc.eu
You might also have seen me on a few Elixir-related Discord servers, or even Bluesky (@adrianc.eu) and Twitter ; either sharing tech news, helping people, reading in book clubs or just chatting
I’m open to full-time right now, contracting work can be discussed.
I'm looking for any developer position, not only #ElixirLang, even though it represents most of my experience. And if the technology you're using isn't on my resume, give me a chance! I'm a fast learner and I might anyway have studied it in class :P
DM me for more info, like github link, my resume or anything :)
Boosts, responses and DM welcome, of course!
#MyElixirStatus #FediJobs #FediJob #FediGetHired #OpenToWork
EDIT: I already have a visa, it was not super clear before 
@triciakickssaas@infosec.exchangeFeatures aren't always innocent 
In the most recent publication by Akamai Technologies' Security Intelligence Group, Tomer Peled found yet -a n o t h e r- vuln in K8s. this time in Log Query, and it can do some big bad.
Did you know that out of the 12 vulns found in Kubernetes since 2023, Tomer has found 4 of them?!?!? i work with the coolest people
anyway, couldn't resist a britney parody sooooooo
https://www.akamai.com/blog/security-research/2024-january-kubernetes-log-query-rce-windows
Improving the compute situation for the computer club I'm part of, almost finished integrating another 256 threads with a TB of RAM into our #Kubernetes cluster.
That's 2/10 of the planned blade chassis racked and installed.
A good start to the year.
