Tianon's Ramblings ✿

I've heard "containers are not a security boundary" enough times that it's started to feel like received wisdom, and my honest read (after 13+ years) is that it's technically defensible but practically sloppy – and the sloppiness matters.

Off-and-on over the last several weeks, I've been spending time trying to learn/understand YubiKeys better, especially from the perspective of ECDSA and signing. 🔏 I had a good mental model for how "slots" work (canonically referenced by their hexadecimal…

See "My Docker Install Process" and "My Docker Install Process (redux)".

I've recently been playing with Debian's iSCSI support, and it's pretty neat.

I recently went through a stint of closing a huge number of issues in the docker-library/php repository, and one of the oldest (and longest) discussions was related to installing dependencies for a compiling extensions, and I wrote a semi-long comment exp…

Following in the footsteps of one of my favorite Debian Developers, Chris Lamb / lamby (who is quite prolific in the reproducible builds effort within Debian), I've started a new project based on snapshot.debian.org (time-based snapshots of the Debian arc…

Since I wrote my first post on this topic, Docker has switched from apt.dockerproject.org to download.docker.com, so this post revisits my original steps, but tailored for the new repo.

I've had several requests recently for information about how I personally set up a new machine for running Docker (especially since I don't use the infamous curl get.docker.com | sh), so I figured I'd outline the steps I usually take.

I've been using VULTR for a little while now and have been generally very pleased (especially with the very recent facelift the management portal received).

DEP stands for "Debian Enhancement Proposals".

The DD-WRT wiki hilariously has a page about this, but it's not very helpful and account creation is entirely disabled, so here goes a blog post for my own future reference: In the dns.he.net control panel, enable the hostname (HOSTNAME) for "dynamic dns".

I am really late coming to this train.

I was given the opportunity to attend DebConf in Portland this year, and I must say that it took me entirely by surprise (as a first-time attendee).

Docker on Gentoo can be a beautiful thing, but it can also be a challenge navigating some of the trade-offs.

My good friend Paul Tagliamonte recently gave a talk at PyCon 2014 about his language, Hy.