Alexej Disterhoft https://alexej.disterhoft.de/ Practical notes on Kubernetes, platform engineering, and observability. en Sat, 03 Oct 2026 00:00:00 GMT Scale ARC runner nodes with NAP https://alexej.disterhoft.de/posts/scale-arc-runner-nodes-with-nap/ https://alexej.disterhoft.de/posts/scale-arc-runner-nodes-with-nap/ Sat, 03 Oct 2026 00:00:00 GMT How I run the nodes under my GitHub Actions runners on AKS node auto provisioning: one NodePool, a hook that protects running jobs, and no spot VMs. github-actions kubernetes aks azure Why user namespaces can't run Docker-in-Docker yet https://alexej.disterhoft.de/posts/why-user-namespaces-cant-run-docker-in-docker/ https://alexej.disterhoft.de/posts/why-user-namespaces-cant-run-docker-in-docker/ Fri, 25 Sep 2026 00:00:00 GMT Setting hostUsers: false on a Kubernetes Pod maps container root to nobody, but dockerd still can't start a container. Here's the exact wall, and the KEP that should remove it. github-actions kubernetes Run self-hosted GitHub Actions runners with ARC https://alexej.disterhoft.de/posts/run-self-hosted-github-actions-runners-with-arc/ https://alexej.disterhoft.de/posts/run-self-hosted-github-actions-runners-with-arc/ Thu, 24 Sep 2026 00:00:00 GMT How I run self-hosted GitHub Actions runners inside private Azure networks: Actions Runner Controller, a GitHub App, a small runner image and one test job. github-actions kubernetes aks azure Use CiliumCIDRGroup to simplify Cilium network policies on AKS https://alexej.disterhoft.de/posts/use-ciliumcidrgroup-to-simplify-cilium-network-policies-on-aks/ https://alexej.disterhoft.de/posts/use-ciliumcidrgroup-to-simplify-cilium-network-policies-on-aks/ Sat, 04 Apr 2026 00:00:00 GMT How to use CiliumCIDRGroup on AKS to model external Azure endpoints as reusable, labeled policy targets for cleaner Cilium network policies. cilium kubernetes network-policy aks azure security Reverse-engineering the MapR ticket format https://alexej.disterhoft.de/posts/reverse-engineering-the-mapr-ticket-format/ https://alexej.disterhoft.de/posts/reverse-engineering-the-mapr-ticket-format/ Tue, 26 Dec 2023 12:00:00 GMT How I reverse-engineered the MapR ticket format, recovered its protobuf definition and parsed tickets in Python, using only public artifacts. mapr kubernetes reverse-engineering security Use Touch ID for sudo on macOS Sonoma and newer https://alexej.disterhoft.de/posts/sudo-touch-id-macos/ https://alexej.disterhoft.de/posts/sudo-touch-id-macos/ Tue, 26 Dec 2023 00:00:00 GMT On macOS Sonoma and newer, you can enable Touch ID for sudo with a local PAM file that survives system updates. macos sonoma