Posts

"One container for the whole machine" is just a VM with extra steps. A week later: the steward container pattern. A thin Alpine image that orchestrates MORE containers. Don't extend scratch images — use them.

Why running K3s "the wrong way" gives you versioned, testable infrastructure that Ansible never could.

What if your kernel could sandbox drivers without hardware isolation, and your binaries got faster every time you upgraded your CPU?