DEV Community

Schiff Heimlich profile picture

Schiff Heimlich

DevOps Engineer

Joined Joined on 
Why Your Alpine Containers Might Be Hiding a Security Blind Spot

Why Your Alpine Containers Might Be Hiding a Security Blind Spot

Comments
2 min read
When 'No space left on device' has nothing to do with disk space

When 'No space left on device' has nothing to do with disk space

Comments 1
3 min read
Nginx proxy_pass: The trailing slash that changes everything

Nginx proxy_pass: The trailing slash that changes everything

5
Comments 1
1 min read
That Time Your Deploy Failed Because SSH Thought You Were an Attacker

That Time Your Deploy Failed Because SSH Thought You Were an Attacker

Comments
2 min read
That Time Client Retries Turned a Recovery Into a 7-Hour Outage

That Time Client Retries Turned a Recovery Into a 7-Hour Outage

1
Comments
2 min read
That time YAML silently broke your config because of Norway

That time YAML silently broke your config because of Norway

1
Comments
2 min read
The sudoers.d Trap That'll Waste an Hour of Your Life

The sudoers.d Trap That'll Waste an Hour of Your Life

1
Comments
2 min read
Why Your Kubernetes Automation Keeps Getting Blocked by Humans

Why Your Kubernetes Automation Keeps Getting Blocked by Humans

1
Comments
2 min read
Bash Parameter Expansion: Two Quirks That Slip Through Code Reviews

Bash Parameter Expansion: Two Quirks That Slip Through Code Reviews

2
Comments
2 min read
Nginx proxy_buffering: the one setting that quietly breaks your backend under load

Nginx proxy_buffering: the one setting that quietly breaks your backend under load

1
Comments
2 min read
When Disk Space Is Not Disk Space: The Inode Exhaustion Problem

When Disk Space Is Not Disk Space: The Inode Exhaustion Problem

1
Comments
3 min read
strace in production: when your process won't start and logs say nothing

strace in production: when your process won't start and logs say nothing

1
Comments
2 min read
Why logrotate silently does nothing and how to actually debug it

Why logrotate silently does nothing and how to actually debug it

1
Comments
2 min read
One-Command VPS Reinstall: Two Things Worth Knowing

One-Command VPS Reinstall: Two Things Worth Knowing

1
Comments
1 min read
Why BusyBox in Your Alpine Containers Is a Bigger Problem Than You Think

Why BusyBox in Your Alpine Containers Is a Bigger Problem Than You Think

1
Comments
2 min read
The logrotate copytruncate race condition that silently drops logs

The logrotate copytruncate race condition that silently drops logs

1
Comments
2 min read
Bare-Metal Kubernetes: What NKP Metal Gets Right

Bare-Metal Kubernetes: What NKP Metal Gets Right

1
Comments
2 min read
Your Internal Developer Platform Is Probably Ignoring Your Java Services

Your Internal Developer Platform Is Probably Ignoring Your Java Services

1
Comments
2 min read
SSH Key Permissions: The 5-Minute Fix That Actually Works

SSH Key Permissions: The 5-Minute Fix That Actually Works

1
Comments
2 min read
When Your Script Dies with EPIPE: The Bug Is Two Functions Upstream

When Your Script Dies with EPIPE: The Bug Is Two Functions Upstream

1
Comments
2 min read
Your Alpine Base Image Has BusyBox. That's Probably Fine Until It's Not.

Your Alpine Base Image Has BusyBox. That's Probably Fine Until It's Not.

1
Comments
2 min read
set -e Will Kill Your Script For No Good Reason

set -e Will Kill Your Script For No Good Reason

1
Comments
2 min read
The One-Line Audit That Might Save You a Container Incident

The One-Line Audit That Might Save You a Container Incident

1
Comments
1 min read
Why Your rsyslog Config Is Quietly Breaking (And How to Fix It)

Why Your rsyslog Config Is Quietly Breaking (And How to Fix It)

1
Comments
2 min read
You might not need Redis: a DB table and your filesystem do more than you think

You might not need Redis: a DB table and your filesystem do more than you think

2
Comments
2 min read
Your Secure Boot Keys Expired in June — Here's How to Check

Your Secure Boot Keys Expired in June — Here's How to Check

1
Comments
2 min read
Bare-Metal Kubernetes: What NKP Metal Gets Right

Bare-Metal Kubernetes: What NKP Metal Gets Right

1
Comments
2 min read
systemd RestartSec does not wait for your process to actually exit

systemd RestartSec does not wait for your process to actually exit

1
Comments
1 min read
Bare-Metal Kubernetes Without the Management Overhead

Bare-Metal Kubernetes Without the Management Overhead

1
Comments
1 min read
The BusyBox in Your Alpine Containers Is a Security Risk You Probably Didn't Know About

The BusyBox in Your Alpine Containers Is a Security Risk You Probably Didn't Know About

1
Comments
2 min read
Gitea's Docker Image Shipped a Dangerous Default, and It's Still Catching People

Gitea's Docker Image Shipped a Dangerous Default, and It's Still Catching People

1
Comments
2 min read
Linux cgroups: Limiting Process Resources Without the Pain

Linux cgroups: Limiting Process Resources Without the Pain

1
Comments
2 min read
Nginx Log Woes: When $remote_addr Lies to You

Nginx Log Woes: When $remote_addr Lies to You

1
Comments
2 min read
git absorb: the fixup workflow that sorts itself out

git absorb: the fixup workflow that sorts itself out

1
Comments
1 min read
When Your Scheduled Job Takes Longer Than Its Interval

When Your Scheduled Job Takes Longer Than Its Interval

Comments 1
2 min read
Bare-Metal Kubernetes: What the Noise Is Actually About

Bare-Metal Kubernetes: What the Noise Is Actually About

Comments
4 min read
jq in Shell Scripts: The Small Things That Trip You Up

jq in Shell Scripts: The Small Things That Trip You Up

Comments
2 min read
Linux 7.2 cut pipe mutex contention — why your shell pipelines just got faster

Linux 7.2 cut pipe mutex contention — why your shell pipelines just got faster

Comments
2 min read
The Microsoft UEFI CA from 2011 expired last week. Here's what to check.

The Microsoft UEFI CA from 2011 expired last week. Here's what to check.

Comments
2 min read
Your CI ran code it should not have, and you cannot prove it did not

Your CI ran code it should not have, and you cannot prove it did not

Comments
2 min read
The jq newline that silently corrupted my URLs

The jq newline that silently corrupted my URLs

Comments
1 min read
Making HTTP requests from a container with no curl

Making HTTP requests from a container with no curl

Comments
2 min read
You might not need Redis: a DB table and your filesystem do more than you think

You might not need Redis: a DB table and your filesystem do more than you think

Comments
2 min read
IPv6 zone identifiers do not belong in URLs

IPv6 zone identifiers do not belong in URLs

Comments
2 min read
IPv6 zone identifiers in URLs are a quiet parser gotcha

IPv6 zone identifiers in URLs are a quiet parser gotcha

Comments
2 min read
The queue probability drops faster than you think when you add servers

The queue probability drops faster than you think when you add servers

Comments
2 min read
Homebrew 6.0 sandbox: what the systemd confinement actually does

Homebrew 6.0 sandbox: what the systemd confinement actually does

Comments
2 min read
Batch-converting documents to markdown with Microsoft's markitdown

Batch-converting documents to markdown with Microsoft's markitdown

Comments
1 min read
Systemd timer units: two things cron still cant do

Systemd timer units: two things cron still cant do

Comments
2 min read
Your Java Container Is Lying to You About Its Memory

Your Java Container Is Lying to You About Its Memory

Comments
2 min read
Your gRPC health check might be lying to you

Your gRPC health check might be lying to you

Comments
2 min read
Git rerere: the feature you didnt know you needed

Git rerere: the feature you didnt know you needed

1
Comments
2 min read
Git rerere: the setting I enable on every machine after forgetting it exists

Git rerere: the setting I enable on every machine after forgetting it exists

Comments
2 min read
Go's httptrace: debugging HTTP request pipelines without leaving the standard library

Go's httptrace: debugging HTTP request pipelines without leaving the standard library

Comments
2 min read
Google API Key Deletion Is Not Instant — Here's What Actually Happens

Google API Key Deletion Is Not Instant — Here's What Actually Happens

Comments
2 min read
When Your VPS Blocks Outbound SMTP: What Actually Helps

When Your VPS Blocks Outbound SMTP: What Actually Helps

Comments
2 min read
Enable http2 debug logging in Apache to catch HTTP/2 abuse patterns

Enable http2 debug logging in Apache to catch HTTP/2 abuse patterns

Comments
2 min read
Why Your Kubernetes Cost Optimizations Stay Manual (And What Actually Helps)

Why Your Kubernetes Cost Optimizations Stay Manual (And What Actually Helps)

Comments
2 min read
A Caddy Cert Expired Because systemd-resolved Was Selectively Lying

A Caddy Cert Expired Because systemd-resolved Was Selectively Lying

Comments
2 min read
systemd-resolved broke my TLS cert renewal

systemd-resolved broke my TLS cert renewal

Comments
1 min read
loading...