DaTosh Blog

CoreDNS is the DNS server that powers most (all?)

GitHub Actions are a powerful way to automate your software development workflows, and manage them right in your repository.

Cloudflare has recently open-sourced the OPKSSH (OpenPubkey SSH) implementation, which they got as part of their acquisition of BastionZero last year.

A good Identity and Access Management (IAM) system is often overlooked in smaller environments and homelabs.

Up until this point, we have only persisted data in K8s’ etcd database.

Last time, we added ingress-nginx to our cluster so that external traffic can hit our services.

Last time, we added automated dependency updates to our cluster.

Last time, we set up Cilium and Flux to enable networking and GitOps for our Kubernetes cluster.

Last time, we left our Cluster in a semi-happy state: The nodes were up, the control plane was available, but we had no cluster network.

First things first, we need some nodes that make up our cluster.

The year was 2024, Cyber Monday was rolling by and my manager pointed out that I still had a budget available for training and certifications.

Lots of people ask for advice on how to get started in open source.

Popularized by Google[1][2], Haunted Graveyards are pieces of code that, while providing a business value, are so ancient, obtuse, or complex that no one dares enter them.

Everything started with a simple question: “Why does my laptop get hot watching YouTube?”

After attending SigstoreCon, I got inspired by Priya Wadhwa’s Keynote: Signing Git Commits with Gitsign, to finally set up gitsign for my dev environment.

In a previous post, we explored how to generate a Software Bill of Materials (SBOM) and subsequently scan them for vulnerabilities.

In our last post, we explored how Software Bill of Materials (SBOMs) provide us with a transparent view of all dependencies in Constellation.

Constellation is an infrastructure product and includes several different components: A command-line interface (CLI) manages the life-cycle of the Confidential Kubernetes cluster In-cluster services provide features such as key management and secure node…

After integrating cosign into the release process of Constellation’s CLI, I also wanted to improve the supply chain security of our metadata that are used for attestation.

This is a summary of the talk I gave at the Kubernetes Community Days (KCD) Berlin 2022.

Status: Complete, action items in progress.

Since DNS:NET provides support only for a limited number of supported routers, and pfSense is not on that list, I will share my configuration here.

VirtualBox GUI is slow for repetitive tasks such as starting & stopping virtual machines.

Hosting multiple containers on unRAID, and keeping track of their port mappings can become quite annoying.