Was renaming env var and my IDE updated it in my sops file, and it bricked the file. Good to know that the key name is taken into the checksum as well.
Recently I gave a terraform talk, and people ask how to get started with terraform. The simple answer is to try to get your hands dirty with it, but at certain point you have to learn how to "manage" the ever-growing terraform project.
Single-project structure
In the beginn...
Naturally, when you are working on a project, be it python, go, rust, you would write code and make sure it works as expected. For deployments, packaging your project into a docker image and deploy it as a container would guarantee that it would work the same regardless of w...
Recently gave a talk about IaC and FinOps. People couldn't agree on who should own cloud cost optimization initiative. But if you ask me, it's a team sport :)
Also, if finance isn't monitoring the numbers, high cloud costs would be the least of your worries.
https://speakerd...
ภาษาไทย
Given the rise of duckdb and polars in recent years, in addition to parquet format being more widely adopted for data storage format, it might be a good time to see how source data format affects data processing speed - in addition to the framework choice.
Process...
Background
If you have to work with virtual machines (VMs), you know the drill: disable password authentication and only allow private key authentication. If you want to sleep better at night, make the VMs only accessible through a private network to reduce the attack surfa...
I'm eval-ing a tool where you can upload artifacts to it. The docs say you can use toolA, toolB, toolC to upload, but it doesn't mention anywhere that you can also use toolX for this (and toolX is more popular and widely used). Very turf war vibe.
Recalled this prod story.
Had to restart a container on a vm to update its config (can also be changed via ui). Previous guy set it up, and he left the org by then, luckily we can ssh into the vm. We restarted container, only to find out that the docker run command didn't mo...
CI (continuous integration) is kind of tricky in a sense that each CI vendor has its own implementations, often glued together via yaml configurations. If you have a CI to build a binary, unless you use bash to 1) install dependencies and b) build the artifacts, most likely ...
Given the trend where open-source software license changes to be less permissive, or move features behind a paywall,
existing users might not be quite as happy about this predicament. Case in point: MinIO Removes Web UI Features from Community Version, Pushes Users to Paid P...
Back in February 2025, Cloudflare announced that its terraform v5 provider is GA. However, this release contains a lot of breaking changes, but I understand why it had to be this way - because it's less work if you generate a terraform provider via OpenAPI specs.
The v4 to v...
Everyone agrees that python is great for data stuff, be it data engineering or machine learning. Although rust is
gaining more traction for data-related applications, python is here to stay.
Those who venture into machine learning are at least familiar with sklearn - a popul...
Initial Setup
Around 2022-23, I was browsing awesome self-hosted and came across Sourcegraph, a popular code search tool. I don't plan to pay, and they allowed self-hosting, so it was perfect for me at the time. Then you still can't search code in GitHub (which we used for ...
WASM is known for being very portable because the only thing it asks for is a browser runtime. This means it doesn't
matter if you have machines on linux/amd64, windows/amd64, darwin/aarch64, WASM can run on all these platforms without
required modifications.
WASM can be u...
Happy to say I'm a direnv convert. No more setting up dotenv for every project I work on is a godsend (and especially when you write in multiple languages this gets old real fast).
Correction 2025-06-16: there was a calculation error for artifacts size difference, it has been fixed.
Previously, we've seen how WASM performs.
But what about delivery methods? This means runtime overhead as well, because executing a raw binary vs container means
startup t...
Lately Docker Desktop on Mac behaves weirdly, namely its erratic memory consumption. Not willing to babysit the memory usage, I looked into alternatives, and found a few contenders: Colima, Podman and Orbstack.
Being an open-source aficionado, naturally I gravitate to Colima...
Sometimes, running an application requires you to supply a password, or something along these lines. If you have a terminal-based workflow, sometimes it can require an authentication token.
These configurations would need to be supplied either at runtime or stored somewhere ...
It's very amazing with the amount of work put into Proton engine for running windows games on linux.
I installed a game from 2015-ish with native linux port - the screen stutters when I move the camera, and it crashes very often. But if I run this game through Proton, zero issues!
