-
One docker rm -f took down my whole k3s cluster
Freeing a busy port with docker rm -f by filter removed the external Postgres that holds my k3s cluster state: about 20 minutes of total outage. How k3s datastores work, why recovery was quick, and the guard rails I added.
-
ComfyUI on demand: systemd socket activation for a GPU container
Idle ComfyUI held up to 2.8 GB of VRAM my LLMs needed. A systemd socket now starts it on the first request and stops it after 10 idle minutes, and a guard makes room for image jobs.
-
9,151 critical CVEs, mostly in images I wasn't running
My weekly Trivy report counted 9,151 criticals across 1,925 images; only 152 were running. How I scoped the scan, cleaned old tags safely, triaged by fixable, and patched a PHP RCE the same day.
-
Running a Tor bridge at home without exposing the LAN
My Tor bridge was flagged Not Recommended because a five-week-old latest image aged out. How I run an obfs4 bridge and Snowflake proxy at home: isolated, limited, current and monitored.