Blog
11 postsThings that actually made it out of the backlog. Against all odds, these got done. Or at least documented.
2026
2026.06.25
Smuggling NumPy Into Go
Calling NumPy from Go turns out to mean smuggling a whole CPython interpreter into your binary. So I did, and then made it earn its keep.
2026.06.22
Bring Your Own Shell
I deleted the shell out of a production container, then spent a few days figuring out how to debug one that no longer has it.
2026.06.15
Codesigning My Way Into a Hypervisor
I tried to deploy my tiny bootable image on Apple's Virtualization Framework. It was annoyingly easy, right up until codesigning and a power button that refused to work.
2026.06.06
Wasting Time with Docker Save
Docker save, OCI tarball surgery, and hand-recomputed digests. gzipping the tar was faster.
2026.06.04
Playing with Grype and Docker
Vulnerability scanning, VEX files, and Docker Hardened Images. CVE count is a bad metric.
2026.04.12
Booting Go on Bare Metal
Docker scratch containers are small, but what if I just booted a Go binary directly on bare metal?
2026.01.17
Building a Brainfuck Compiler
University had me 'build' a compiler by adding features to someone else's code. This time I wanted the segfaults to be my own.
2026.01.11
How ECC Memory Works
I always thought ECC was just error correction. Turns out the detection part is the whole point.
2026.01.08
UDP Hole Punching
Making two computers behind NATs talking directly to each other. What could possibly go wrong.
2026.01.03
Headscale LAN Party
Running my own Tailscale so my mates can't blame the network when they lose
2026.01.02
Running Plex in an LXC on Proxmox
Got Plex running in an LXC with iGPU passthrough. Now I maintain media infrastructure for family members. This is fine.