Posts
11 October 2026 · 7 min read
The unreasonable effectiveness of VEX in NixOS
We explore why NixOS is uniquely positioned to implement a scalable process for vulnerability management.
18 May 2026 · 4 min read
Kubernetes’ Default CoreDNS Configuration is insecure
Discover how a default CoreDNS configuration left over for backward compatibility can allow attackers to completely bypass Cilium network policies.
17 May 2025 · 10 min read
Comparison of GitHub Action Scanners
A comparison of GitHub Action Scanners.
15 April 2025 · 5 min read
OpenPubkey SSH (OPKSSH) with Kanidm as Identity Provider
Setting up OpenPubkey SSH with Kanidm as the Identity Provider.
10 April 2025 · 9 min read
Kubernetes Home Lab in 2025: Part 6 - Identity & Access Management
19 March 2025 · 6 min read
Kubernetes Home Lab in 2025: Part 5 - Persistent Storage
12 March 2025 · 6 min read
Kubernetes Home Lab in 2025: Part 4 - Cert-Manager
26 February 2025 · 6 min read
Kubernetes Home Lab in 2025: Part 3 - Ingress
19 February 2025 · 4 min read
Kubernetes Home Lab in 2025: Part 2 - Automated Dependency Updates
12 February 2025 · 7 min read
Kubernetes Home Lab in 2025: Part 1 - CNI & GitOps
5 February 2025 · 7 min read
Kubernetes Home Lab in 2025: Part 0 - Bootstrapping the Cluster
4 February 2025 · 4 min read
Kubernetes Home Lab in 2025: Introduction
17 December 2024 · 4 min read
Getting started with open source: Making my first contribution to Hugo.
4 December 2024 · 4 min read
The Hidden Risks of High-Quality Code
The daily struggles of a consultant as a software engineer.
2 June 2024 · 3 min read
Make Chrome go brrrrrr….
2 November 2022 · 2 min read
Gitsign in Remote Environments
27 October 2022 · 4 min read
Bringing first-class support to SBOMs and attestations for Constellation containers
10 October 2022 · 2 min read
My favorite tools to keep a zero vulnerabilities posture for Constellation
3 October 2022 · 2 min read
Generating SBOMs for Confidential Kubernetes is easier than you think!
26 July 2022 · 2 min read
Verify cosign signatures in go using sigstore/sigstore
12 July 2022 · 4 min read
What can Confidential Computing do for the Kubernetes community?
23 January 2022 · 3 min read
Postmortem: unRAID Flash Device Failure
5 January 2022 · 1 min read
Configure DNS:NET as ISP on pfSense Router
28 December 2021 · 2 min read
Control VirtualBox VMs via Batch
23 January 2021 · 3 min read
Traefik 2 as Docker Reverse Proxy on unRAID
Setting up Traefik 2.x as Reverse Proxy for Docker Containers on unRAID 6.8.x
