Yet another enthusiast blog!

The historic go-to solution for network booting is PXE.

This post is the second in a 2 part series: Part 1: Introduction to Linux Netkit interfaces.

This post is the first in a 2 part series: Part 1: Introduction to Linux Netkit interfaces — with a grain of eBPF (This post) Part 2: Creating a Linux “Yogurt-phone” — with netkit and a grain of eBPF If you are reading this, chances are you are already fa…

I’m a passionate SRE who served for more than 6 years as lead system developer in the robotic team at EasyMile.

One thing I love with ArgoCD design is the ability to run its UI out of the production cluster.

I recently came across Talos, an immutable OS for Kubernetes and was immediately sold.

TL;DR: If you are here just for the fix (Which I would if I was you), the actual fixes are at the bottom of the post.

Linux eBPF ecosystem is growing fast with new features coming with every release cycle.

libguestfs is a set of tools for accessing and modifying virtual machine (VM) disk images.

EDIT 2021-09-02: A reader made me realize that the “socat” trick can be greatly improved by adding “,fork” on the server part.

I’ve been looking for a low level Linux network debugging tool for quite some time.

A few years ago, back when I was a student, my school had rooms full of counters running Linux that any student could use at any time.

TL;DR: Using eBPF in recent (>=4.4) Linux kernel, you can turn any kernel function call into a user land event with arbitrary data.

This post is an essay.

A few days ago, my hosting company sent me an automated email notifying me that port 25 had been blocked on my personal server.

Yesterday, dealt with a machine in a pretty bad state: SSH was Down Memory was exhausted (OOM) Ctrl + Alt + Del from VNC was not responding A background operation on the OpenStack API was preventing any nova reboot --hard zombie-essential-instance.my-infr…

Some weeks ago, I did an internal presentation on Docker.

A couple of weeks ago, I wanted to run some experiment to see how Docker could run in a cloud / shared hosting like environment.

Last Week-End, I wanted to play around with Docker on a Power8 processor.

Docker is the container system for reproducible builds.

Seccomp is basic yet efficient way to filter syscalls issued by a program.

Following the previous post on PID namespace (Restart process numbering to “1”), would like to go further and fly eve closer to full-featured VMs ?

Following the previous post on FS namespace (mountpoints table isolation), we will now have a look at an amazing one: isolated mount table.

Following the previous post on IPC namespace (Inter Process Communication isolation), I would now like to introduce my personal favorite one (as sysadmin): PID namespaces.

Following the previous post on UTS namespace (hostname isolation), we will now go deeper and look at a more security oriented namespace: IPC, Inter-Process Communications.

As a part of my job at OVH I dealt with Linux Namespaces as a security mechanism in a “yet to be announced” product.

Que l’on souhaite disposer simplement d’un gestionnaire de version pour un projet occasionnel ou mettre en place une véritable solution “d’Intégration Continue” (“Continuous Integration” en anglais ou “CI”) GIT est probablement la solution la plus puissan…

Disclaimer: This post is about a real virus, really seen in the wild.

Disclaimer: This post is about a real virus, really seen in the wild.

Yesterday, a friend of mine asked me urgent help.

Remember my previous post about checking out only new mails from a IMAP account with Python ?

Recently, in a freelance project I had to parse incoming mails wherever they are in the mail account and, preferably, avoid re-parsing the whole mail account only for a couple of new mails.

I’ve not posted here in a while as I’m now full time busy with my startup project.

It goes without saying that a 5000ms latency is… unacceptable in a real-time environment.

DynamoDB is a key:value store of the NoSQL family developed and offered by Amazon as part of AWS.

I recently moved to a new dedicated server and decided it also was a good to time do start doing things “the good way” tm.

A couple of days ago, well, 5 to be precise, I moved this blog to a new server, new Nginx based stack.

I just installed the beautiful NGINX reverse proxy on my personal server.

[UPDATE] I still did not find the real source of the problem but it seems that both OVH and Ubuntu stock kernel fail to renew the default routes.

« La preuve de la faillite du système communiste, c’est sa condition de survie.

Pour peu que l’on s’intéresse à l’IT en France, il est difficile de passer à coté de l’appel d’offre qui oppose l’AFNIC et un nouvel entrant, FRNIC dans la gestion du ‘.fr’ et les 10 autres domaines français.

About 1 month ago, OVH launched its “Public Cloud”.

Coming from the PHP/MySQL world, I got used to frameworks such as the lightweight CodeIgniter or the very complete Symfony and I missed clean MVC coding.

When a friend tried to syndicate my blog on his, his server was unable to complete the sync.

When I rented this OVH server, I wanted to be able to host all my web tools on it on port 80 using both my IPv6 and IPv4 stack.