12h ago · 5 min read · TL;DR: Docker containers are just standard Linux processes restricted by Namespaces and Cgroups. Namespaces provide visibility isolation by partitioning kernel resources like PIDs and networking, whil
Join discussion
15h ago · 10 min read · When organizations start using Kubernetes in production, security becomes one of the most important concerns. Multiple teams interact with the same Kubernetes cluster: Developers deploy applications
Join discussion4d ago · 5 min read · Your Dockerfile Is Probably Broken Not broken as in "won't build." Broken as in: bloated, insecure, slow to build, impossible to debug, and running as root in production. Most teams copy a Dockerfile from Stack Overflow in 2019 and never touch it aga...
Join discussion
5d ago · 8 min read · Eighteen months ago I inherited a mess. A four-person team had built a reasonably capable ML inference service — three Python microservices, a Redis queue, a Postgres instance, an Nginx reverse proxy — all wired together with a docker-compose.yml tha...
Join discussion5d ago · 8 min read · About 14 months ago, my team of four migrated our entire backend — a fairly standard Node.js/Python mix serving a B2B SaaS product — fully onto AWS Lambda. We'd read the same blog posts you probably have. Pay for what you use, infinite scale, no serv...
Join discussion5d ago · 13 min read · TLDR TLDR: Kubernetes (K8s) is an operating system for the cloud. It manages clusters of computers (Nodes) and schedules applications (Pods) onto them via a continuous declarative control loop — you describe what you want, and Kubernetes continuousl...
Join discussion
