Nftables, Docker, and a default drop policy
How to keep the firewall under control with a default drop policy without breaking applications like Docker.
Latest posts
Faster Alacritty start-ups with single-instance mode
As an alternative to the client/server mode in terminal emulators like URxvt, which decreases startup time and overall memory usage.
Truly declarative Kubernetes resource management
From the basics of Kustomize to the more advanced topics of pruning resources, vendoring Helm charts, and encrypting Secrets.
Recent projects
Rustweb
The engine behind this website, based on Rust and PostgreSQL.
Metaspawn
Desktop container manager based on systemd-nspawn, Btrfs, and nftables.
Chernobyl Simulator
Chernobyl Nuclear Power Plant simulation game from 1998 ported to 64-bit Windows.