Posts
Page 21 of 53
-
Compose Watch: Faster Dev Loops
Docker Compose Watch syncs your code into running containers without rebuilds. Here's how to set it up and why your dev loop is about to get a lot less painful.
11 min read -
Glances vs Netdata: Two Free-Tier Monitors Compared
Glances vs Netdata: which free monitor wins for your home lab? We compare install effort, UI quality, alerting, and when to ditch both for Prometheus.
10 min read -
tini vs dumb-init vs --init
PID 1 zombie reaping in containers — tini, dumb-init, and docker --init compared; when each one fixes your signal handling and stops your 10s shutdown tax.
11 min read -
Container Escape: How to Stop It
Containers are not VMs. Here are the real escape vectors — privileged mode, mounted sockets, kernel CVEs — and the runtime hardening that actually helps.
10 min read -
ko vs Jib vs Buildpacks
Build container images without writing a single Dockerfile — ko for Go, Jib for Java, Paketo Buildpacks for everything else. Real benchmarks, real tradeoffs.
11 min read -
Sentry Self-Hosted for Application Errors
Run Sentry on your own hardware to catch real application errors — stack traces, source maps, release tracking, alerts, and when you should just pay for SaaS.
11 min read -
Cosign Keyless: Sign Without Keys
Cosign keyless signing uses GitHub OIDC + Fulcio + Rekor to sign container images without managing private keys. Here's how it actually works and why you want it.
12 min read -
Docker Bake vs Compose Build
Orchestrating multi-image Docker builds: docker buildx bake vs compose build, matrix targets, multi-arch, caching, and when each one actually wins.
10 min read -
Heimdall vs Homepage vs Homer: Status Dashboards
Heimdall, Homepage, or Homer? Pick the right self-hosted dashboard for your homelab — real configs, Docker auto-discovery, and live API status widgets included.
10 min read -
cAdvisor + Prometheus: Per-Container Metrics Done Right
Stop guessing which container is eating your RAM. Set up cAdvisor + Prometheus to get real per-container CPU, memory, and network metrics in your homelab.
10 min read -
cri-o vs containerd
The CRI runtime under your Kubernetes cluster — cri-o vs containerd compared on footprint, distros, performance, and day-2 operability.
10 min read -
RustDesk vs MeshCentral: Self-Hosted Remote Desktop
TeamViewer costs a fortune, AnyDesk wants a subscription, and Chrome Remote Desktop routes everything through Google. Here's how RustDesk and MeshCentral stack up as self-hosted alternatives — and which one fits your use case.
10 min read
