Alexej Disterhoft.
Staff Platform Engineer at Redcare Pharmacy. Kubestronaut.
Writing
Scale ARC runner nodes with NAP
How I run the nodes under my GitHub Actions runners on AKS node auto provisioning: one NodePool, a hook that protects running jobs, and no spot VMs.
Why user namespaces can't run Docker-in-Docker yet
Setting hostUsers: false on a Kubernetes Pod maps container root to nobody, but dockerd still can't start a container. Here's the exact wall, and the KEP that should remove it.
Run self-hosted GitHub Actions runners with ARC
How I run self-hosted GitHub Actions runners inside private Azure networks: Actions Runner Controller, a GitHub App, a small runner image and one test job.
Use CiliumCIDRGroup to simplify Cilium network policies on AKS
How to use CiliumCIDRGroup on AKS to model external Azure endpoints as reusable, labeled policy targets for cleaner Cilium network policies.
Reverse-engineering the MapR ticket format
How I reverse-engineered the MapR ticket format, recovered its protobuf definition and parsed tickets in Python, using only public artifacts.
Use Touch ID for sudo on macOS Sonoma and newer
On macOS Sonoma and newer, you can enable Touch ID for sudo with a local PAM file that survives system updates.