Talos Linux Vendor Lock-In: Five Questions, Run on My Own Nodes
Talos Linux is MPL-2.0 and Sidero can't relicense it alone. The vendor risk sits in the defaults, the BSL code around the core, and a team Yardi bought on 14 September.
Nothing stays a black box if you're stubborn enough.
Kubernetes, linux, privacy, opensource software. I like the freedom to poke at things until they explain themselves. These days I do that for a living, with permission. Building platforms & hardened infrastructure with an offensive security itch in regulated, critical sectors.
Supply Chain Security in GitLab CI: SBOM, cosign, and the Policy That Blocks
Generate an SBOM in GitLab CI, sign the image digest with cosign, attach the SBOM as an attestation, and make Kyverno refuse anything unsigned. Plus an honest read of which SLSA level 3 requirements a GitLab runner meets.
Your Dependency's Business Model Is Part of Your Threat Model
Portainer froze its free edition this month. HashiCorp did it to Vault in 2023, MinIO did it in four steps without touching the licence. Thirty-six dated cases, what each one cost, and five questions to score your own stack.
NIS2 for Platform Teams: Which Control Satisfies Which Article
The Dutch Cyberbeveiligingswet has applied since 15 August 2026. Here is article 21 mapped onto Kubernetes controls, with the Kyverno policy and the alerting rules.
Linux Is for Everyone: Why This Blog Now Welcomes Beginners Too
This blog is expanding beyond platform engineering to help Linux beginners. A level taxonomy and a trimmed tag cloud help you find content at your level, from first install to production clusters.