Tuan-Anh Tran

I used to be interested in Ladybird .

A snapshot of what I actually use.

For years, companies fought to get their icon on your phone.

Disclaimer I am not a lawyer, nor am I an expert in copyright law or software licensing.

Most people interact with BuildKit every day without realizing it.

The old compliance rule no longer works For years, enterprise security has lived by a simple, if flawed, rule: “Patch anything with a CVSS score above 7.0 within 30 days.”

Agents break the contract of trust Agents are underdeterministic.

The bottleneck has moved from writing code to verifying it.

We are entering what I like to call the “Post-Agentic” era.

When I first started building and deploying AI agents that could actually do things (edit code, run tests, manage infrastructure), my first instinct was to lock everything down, perhaps because I’ve been in the container/microVM space for so long.

Note: When I talk about 0-CVE, I mean zero known CVEs.

It’s weird to see Docker Inc (the company) struggle to find its place in 2026.

The AI era has fundamentally changed the privacy landscape.

I decided to upgrade my NAS from a Synology DS918+ to an all-flash setup.

Mình vừa đọc được một bài viết về Handmade Software Foundation , một tổ chức nhỏ với mục tiêu hỗ trợ và quảng bá “handmade software”, tức là phần mềm được viết thủ công bởi con người thay vì AI.

As software gets cheaper to produce (thanks to coding agents) and quality expectations shift, we’re witnessing the rise of disposable software: code that you generate, use, and discard rather than maintain indefinitely.

This seems to be a very common issue for Blizzard games.

There is this old saying ideas are cheap and execution is everything?

LLM MCP security encompasses numerous critical concerns.

Trừ khi công ty của bạn chuyên về mô hình nền tảng (foundation model), việc tích hợp AI sẽ không tạo ra sự khác biệt đáng kể cho sản phẩm của bạn.

A typical Google Sheets link looks like this https://docs.google.com/spreadsheets/d/<....

This is just notes I wrote for myself or anyone looking to get started with packaging for Arch Linux.

The OBS Studio Flatpak Fiasco: A Packaging Problem The open-source streaming software OBS Studio has found itself at the center of a packaging controversy within the Fedora Linux community.

I just read this post on HackerNews regarding why you should not embedding YouTube videos directly.

Mình đang tìm hiểu để mua 1 cái TV mới, sau khi cái TV 10 năm tuổi đã lăn ra chết.

Cursor on Linux is offered as an AppImage.

Temporary File Hosting with 0x0.st Sometimes you need a quick way to upload and share temporary files, like logs, for troubleshooting. 0x0.st is a simple and open-source solution that Upload files for free Keep them at least 30 days (which should be more…

I’m tired of chasing individual CVEs.

In this post, I’ll discuss my experience transitioning to Chainguard Images and the rationale behind this decision.

Building a machine learning rig This is my notes while building a machine learning rig.

Update Sober is now the recommended way to play Roblox on Linux.

What is reproducibility?

The best optimization is simply shutting things off You work from 8am to 8pm.

The Write your first Wolfi package contributing guideline on Wolfi repo is a bit vague for beginner so I thought a more detailed, hands-on tutorial would benefit first-time contributor.

Thinh Nguyen có chia sẻ 1 bài khá tổng quan về secret trên k8s .

Is it even possible?

The symptom: CS:GO launched to a black screen and just crash right after.

Hôm trước mình hơi băn khoăn chút việc nếu sử dụng public ECR (public.ecr.aws) với sử dụng 1 k8s cluster trong private subnets, thì bandwidth từ việc pull images về trong private subnets sẽ đc tính thế nào.

I read many posts regarding Shure MV7 doesn’t work at all on Linux: here , here and here .

So you probably already heard the news Docker Desktop is no longer free .

K8s 1.22 giới thiệu Pod Security Admission (sau này gọi tắt là PSA) phiên bản alpha, để thay thế cho Pod Security Policy (PSP).

Previous setup I used a small VPS instance on RamNode to host my blog previously.

TLDR: there’s a sample repo here if you’re lazy to read this post.

Nguồn gốc 2017, term GitOps đc WeaveWorks promote lên với bài viết “Operations by Pull Request” , đại để là k8s system state đc lưu ở 1 git repo changes made thông qua pull request rồi chạy CI/CD pipeline có công cụ hỗ trợ detect configuration drift và re…

Structured logging Một best practice vẫn được recommend cho tới bây giờ là structured logging.

I got fed up with macOS.

Cloudflare Warp is currently not supporting Linux.

TLDR: I wrote a SAX parser for Node.js.

I recently discover piscina project.

I recently give fish shell another try and it doesn’t disappoint me this time.