Found 16 results for: Image Search
Run containers as non-root, with a read-only filesystem, dropped capabilities and a default-deny NetworkPolicy, so one compromised app has little to work with.
How to replace hand-run kubectl apply with a pull-based GitOps flow: Argo CD, Kustomize overlays, Sealed Secrets and a CI job that only edits an image tag.
Official Supabase Docker stack on a clean Ubuntu sandbox: the pooler and Edge Functions crash-looped. Why, and a compose override that fixed both, with tests.
Why Apache prefork wastes RAM on static files and slow clients, and how a lighttpd front end plus tuned MaxClients and keep-alive fixes it on CentOS 5.
Building Prometheus from source on a host with older Go and Node than the repo asks for: what the build does, what warns, and how I verified the result.
How to set up a single-node edge MQTT aggregator with K3s and WireGuard, and how to fix the faulty flags, units and sysctls that edge guides often repeat.
A Bun or Node.js service can be slow on a VPS because of CPU steal or slow disks. How to measure both, fix the host first, and then compare runtimes fairly.
Pods lose DNS after an egress NetworkPolicy is applied. This article covers the wrong namespace label, the missing TCP port 53 rule and a tested-in-theory fix.
Control planes built on etcd or Raft fail on slow disks. How to test fsync latency, pick between Kubernetes, K3s and Nomad, and prepare a K3s node.
Enforce CIS network sysctl baselines with Ansible, gate deployments on OpenSCAP results, and reject Ingress objects without TLS using an OPA admission policy.
How an Nginx API gateway with rate limiting and upstream keepalive, plus an opossum circuit breaker, limits cascading failures between microservices (2022…
How to measure request latency, CPU steal and disk trends on your own server with Nginx timing logs, Prometheus 2.28 and Grafana 8, without a third-party APM.
How to build reports from raw Apache or Nginx access logs with AWStats on CentOS 6: log format, config, cron, protected access, and limits.
Trivy exits 0 even with CRITICAL findings. I built it from source and made it a real CI gate, then found a secret-scan skip that a green result can hide.
A reference for lowering a cloud bill: measure first, right-size, use Spot for interruptible work, schedule capacity, compare regions, and track egress.
How to keep slow jobs out of the web request path with RabbitMQ, Celery 3.0 and Nginx 1.2 on Debian 7, with corrected configuration and the limits of the setup.