Posts
Page 31 of 80
-
Capsule: Multi-Tenancy for Home Lab k3s
Capsule gives k3s tenants namespace isolation without running vCluster. How to carve a home lab cluster into tenants and stop handing out cluster-admin.
· Updated:14 min read -
Sigstore + Gitsign: Signed Commits Without GPG Pain
Keyless signed git commits with Sigstore and Gitsign, no GPG key rot, no passphrase prompts. OIDC-backed ephemeral certs that just work.
9 min read -
Sealed Secrets vs External Secrets Operator
Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best, home lab cluster or production multi-tenant setup?
· Updated:11 min read -
Mixture of Experts (MoE) for Self-Hosters, Demystified
MoE LLMs like Mixtral and DeepSeek-V3 run 70B-class quality on 7B-ish active params. Here's how sparse activation works and how to run it at home.
· Updated:10 min read -
Dragonfly: P2P Container Image Distribution at Scale
Dragonfly turns your container registry into a P2P swarm. Stop hammering one registry with 200 nodes pulling 4GB GPU images at once.
· Updated:10 min read -
Reloader: Auto-Reload Pods on ConfigMap Change
Stakater Reloader watches ConfigMaps and Secrets and triggers rolling restarts automatically, so your pods always run current config, no kubectl rollout.
9 min read -
Python Libraries Worth Your Time in 2026
The Python libraries actually worth your time in 2026: data tools, ML frameworks, and CLI kit, plus which ones earn a permanent spot in your home lab.
· Updated:13 min read -
Atuin: Shell History That Actually Works Across Machines
Atuin replaces your broken $HISTFILE with a SQLite DB, fzf-style search, and optional E2E-encrypted sync across every machine you own.
· Updated:10 min read -
Cilium on k3s: When eBPF Networking Pays
Replace flannel with Cilium 1.19 on k3s for eBPF routing, Hubble observability, WireGuard encryption, and L7 network policies, here's when it pays off.
· Updated:11 min read -
k3s + Tailscale: Cluster Across Two Sites
Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric, home lab server plus cloud VPS, one single kubectl context.
· Updated:10 min read -
Renovate vs Dependabot: Self-Hosted Dependency Bots
Renovate vs Dependabot for self-hosted teams: config depth, ecosystem coverage, self-host paths, and which bot wins for Forgejo/GitLab shops.
· Updated:13 min read -
KubeVirt on k3s: VMs Next to Pods
Run real KVM virtual machines as Kubernetes resources on k3s. One control plane for pods and VMs, no more juggling Proxmox alongside your cluster every day.
· Updated:10 min read
