Senior Platform Engineer. Infra and programming languages nerd. I write about the stuff nobody teaches: how things really work under the hood, containers, orchestration, authentication, scaling, debugging, and what actually matters when you’re building and running real systems. I share what I wish more real seniors did: the brutal, unfiltered truth about building secure and reliable systems in production.
I am available to provide technical consulting for startups and projects of all sizes.
Most teams still build containers like this: docker build -t my-app . docker push my-app It builds. CI passes. The app runs.But what did you actually just ship? You don’t know what’s in the image You don’t know if it leaked a secret You can’t pro...

Docker caching is one of the most misunderstood mechanisms in modern development workflows. It’s not just a speed boost; it’s an engineering culture. When done right, it can cut build times in half, reduce image size, and save thousands in CI compute...

Most developers only ever use FROM, COPY, RUN, EXPOSE and CMD If they’re fancy, maybe they throw in an ENV or two. But that’s it. That’s their entire Dockerfile vocabulary. And that’s a problem. You’re not writing shell scripts. You’re defining a pro...

Most devs still think Docker gives them isolation. It doesn't. Containers aren’t security boundaries. They’re process wrappers with just enough abstraction to make you feel safe. But if you're running containers with root, broad capabilities, and zer...
