Posts

Daily intelligence briefing covering frontier AI architectures, global software ecosystem breakthroughs, critical CVE alerts, silicon innovations, and open-source systems.

Daily operational intelligence covering Linux kernel advancements, critical CVE advisories, enterprise storage, and infrastructure architecture.

Introduction On a set of shared, multi-user Linux workstations, several things broke in the same few weeks. Files on a user’s NFS home showed up as nobody:nogroup. Once we tightened the share, a user could no longer …

Bu yazının Türkçesi: OPA ile Docker Authorization 1. Introduction I set up opa-docker-authz to restrict Docker on shared, multi-user Linux workstations. After a routine policy update, I noticed that --privileged …