Podman
guest@6admin.io:~$ ls ~/tags/podman
Project 8: a cloud where the only authority is signed git history
A decentralized cloud platform with no controller, no quorum and no token: nodes join a Yggdrasil mesh, pull their desired state from a Radicle repository, verify every commit signature and converge locally. The architecture, the Rust port and the bootstrap day that fixed twenty bugs.
Kubernetes, or not
Kubernetes is rarely the right first choice. An honest tour of the floors below it: podman and quadlet on one host, docker-compose, Docker Swarm, then docker or podman with Nomad and Consul and the real threshold where Kubernetes finally earns its keep.
Docker hardening
Docker hardening: the daemon, capabilities, mounts and why a container escape is a kernel escape.