17posts
The smallest automation in the smart home is also one of the most useful: a Wake-on-LAN packet that spins a sleeping server back to life. A sysadmin read on WoL use cases, Home Assistant automations, coexisting with Zigbee smart plugs, waking on demand, and how to shut down gracefully without cutting power under load.
Your smart bulb does not need access to the network your laptop sits on, but walling it off the wrong way breaks discovery, onboarding, and voice control. Smart home VLAN segmentation from a sysadmin perspective: mDNS, firewall zones per layer, hub placement, and device classes that should never be walled off entirely.
Most smart homes stop the moment the internet drops, because the command path leaves the house. A sysadmin guide to local-first control: Zigbee, Z-Wave, Matter and Thread devices paired to an on-premises hub, remote access added back with a tunnel or VPN, and the WAN-pull drill that proves it still works.
Cloudflare wrapped its beta-era data platform into one GA product line renamed Basin: Pipelines, Catalog, and SQL bring serverless Apache Iceberg ingestion, table maintenance, and distributed querying to R2 with usage-based pricing and free egress. A sysadmin read on what changed, how the pieces fit, CLI commands, limits to watch, and what is still on the roadmap.
OpenAI launched dots at DevDay 2026: always-on agents powered by GPT-6 Astra that run on their own cloud computers and keep working between conversations. A quick look at what changed, the governance model, and the new opportunities for builders and operators, with tables.
Kubernetes, OpenShift, and Rancher get compared like three flavors of the same container platform, and the comparison starts wrong: vanilla Kubernetes is the upstream platform, OpenShift is Red Hat's distribution built on it, and Rancher is SUSE's multi-cluster management layer sitting on top. A sysadmin comparison of the three layers, what each one actually gives you, where the gotchas live, and how to pick for a small fleet.
A sysadmin read on Cloudflare Worker Previews: what each Git branch gets (its own code, configuration, URL, observability, and state), the staging and shared-environment problems they solve, isolated Durable Objects and Containers, real use cases, who the feature is for, and the honest gaps still on the roadmap.
Beszel and Dockhand keep showing up in the same conversation about lightweight self-hosted tools, so people assume they compete. They do not: Beszel is a monitoring hub with historical data and alerts, Dockhand is a Docker management UI. A sysadmin comparison of the two, the measured footprint of each, and how both stack up against the common alternatives: Netdata, Grafana plus Prometheus, Glances, Uptime Kuma, and Dozzle.
A hands-on, sysadmin comparison of Argo CD and Flux after operating both: bootstrap flows, Helm models, SOPS and age secret handling, multi-cluster architecture, drift detection defaults, image automation, disaster recovery, UI and API surface, and the repo structures that make each one click. With real commands and the honest limits.
A sysadmin guide to the Linux watchdog timer: what the kernel watchdog device actually does, why a hardware watchdog and the softdog module are not the same thing, and five steps to arm it safely, from systemd RuntimeWatchdogSec and per-service WatchdogSec to the userspace watchdog daemon, with the tests that prove it fires before you need it.
Why the 3-2-1 backup rule fails when ransomware and compromised root credentials are the threat: immutable and offline copies, quarterly restore drills, recovery key management, and backing up the configuration that defines your stack. A hands-on sysadmin guide.
Dependabot is built into GitHub and zero-config; Renovate is the configurable bot that runs on Gitea, Forgejo, GitLab, and GitHub alike. A hands-on sysadmin comparison: real config for both, the best use cases for each, and the Renovate difficulties that only show up after the onboarding pull request.
A hands-on sysadmin guide to bootstrapping Kubernetes with OpenTofu and Argo CD: what the open-source Terraform fork actually is, why IaC owns day zero and GitOps owns everything after, the exact provider and Helm configuration to install Argo CD, the app-of-apps handoff, and the honest limits of the pattern.
Spin up and tear down a vast.ai GPU box from the CLI: the vast-qwen.sh script searches offers, rents a 2x RTX 3090, serves Qwen3.8-27B-FP8 through vLLM, and exposes an OpenAI-compatible endpoint over SSH, plus the honest cost math on renting versus subscriptions.
A practical comparison of Pullfrog and Vercel's Foreman (the eve software factory): how the four-station pipeline and the GitHub Actions bot each turn issues into reviewed PRs, with real configuration, trust boundaries, and when to use which.
A hands-on, sysadmin-grade guide to Vercel Eve: how the filesystem-first agent framework works, from scaffolding and tools to durable sessions, sandbox backends, and deployment, plus a deep comparison of Eve, Mastra 1.55, and Flue 2.0.
