Posts
Page 5 of 58
-
Capsule: Multi-Tenancy for Home Lab k3s
Stop handing out cluster-admin access to everyone. Capsule gives k3s lab tenants real namespace isolation without the overhead of spinning up vCluster.
10 min read -
Sigstore + Gitsign: Signed Commits Without GPG Pain
Keyless signed git commits with Sigstore and Gitsign, no GPG key rot, no passphrase prompts. OIDC-backed ephemeral certs that just work.
9 min read -
Sealed Secrets vs External Secrets Operator
Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best, home lab cluster or production multi-tenant setup?
10 min read -
Mixture of Experts (MoE) for Self-Hosters, Demystified
MoE LLMs like Mixtral and DeepSeek-V3 run 70B-class quality on 7B-ish active params. Here's how sparse activation works and how to run it at home.
10 min read -
Dragonfly: P2P Container Image Distribution at Scale
Dragonfly turns your container registry into a P2P swarm. Stop hammering one registry with 200 nodes pulling 4GB GPU images at once.
10 min read -
Python Libraries Worth Your Time in 2026
The Python libraries actually worth your time in 2026: data tools, ML frameworks, and CLI kit, plus which ones earn a permanent spot in your home lab.
13 min read -
Atuin: Shell History That Actually Works Across Machines
Atuin replaces your broken $HISTFILE with a SQLite DB, fzf-style search, and optional E2E-encrypted sync across every machine you own.
10 min read -
Cilium on k3s: When eBPF Networking Pays
Replace flannel with Cilium 1.19 on k3s for eBPF routing, Hubble observability, WireGuard encryption, and L7 network policies, here's when it pays off.
11 min read -
k3s + Tailscale: Cluster Across Two Sites
Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric, home lab server plus cloud VPS, one single kubectl context.
10 min read -
Renovate vs Dependabot: Self-Hosted Dependency Bots
Renovate vs Dependabot for self-hosted teams: config depth, ecosystem coverage, self-host paths, and which bot wins for Forgejo/GitLab shops.
11 min read -
KubeVirt on k3s: VMs Next to Pods
Run real KVM virtual machines as Kubernetes resources on k3s. One control plane for pods and VMs, no more juggling Proxmox alongside your cluster every day.
10 min read -
Mesh VPN Showdown: Tailscale, Nebula, ZeroTier, NetBird
Tailscale vs Nebula vs ZeroTier vs NetBird, honest comparison of mesh VPN options for homelabs, small teams, and self-hosters in 2026.
13 min read
