<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
    <title>My notes and stuff - DevOps</title>
    <subtitle>This is just a space for me to share some notes and thoughts. I hope someone finds something useful here.</subtitle>
    <link rel="self" type="application/atom+xml" href="https://suchaboris.com/categories/devops/atom.xml"/>
    <link rel="alternate" type="text/html" href="https://suchaboris.com/"/>
    <generator uri="https://www.getzola.org/">Zola</generator>
    <updated>2025-11-02T00:00:00+00:00</updated>
    <id>https://suchaboris.com/categories/devops/atom.xml</id>
    <entry xml:lang="en">
        <title>Debugging K8s Network Policies</title>
        <published>2025-11-02T00:00:00+00:00</published>
        <updated>2025-11-02T00:00:00+00:00</updated>
        
        <author>
          <name>
            
              Unknown
            
          </name>
        </author>
        
        <link rel="alternate" type="text/html" href="https://suchaboris.com/blog/debugging-k8s-network-policies/"/>
        <id>https://suchaboris.com/blog/debugging-k8s-network-policies/</id>
        
        <content type="html" xml:base="https://suchaboris.com/blog/debugging-k8s-network-policies/">&lt;p&gt;My focus last week (in personal projects space) was to add network policies to my &lt;strong&gt;homelab&lt;&#x2F;strong&gt;. I added them to all custom namespaces but, in the end, had to revert some and replace them with less restrictive ones because some things just stopped working, and I had no time to investigate why.&lt;&#x2F;p&gt;
&lt;p&gt;The biggest challenge was in the very beginning when none of the policies I added did anything. Everything looked good in the logs and on the &lt;strong&gt;K8s&lt;&#x2F;strong&gt; cluster. I mean, there were no errors or reports of invalid configs.&lt;&#x2F;p&gt;
&lt;p&gt;After several hours of cumulative debugging, checking all configs, and brainstorming with AI, I found that my nodes just didn&#x27;t have the &lt;strong&gt;iptables&lt;&#x2F;strong&gt; binary! 🤦&lt;&#x2F;p&gt;
&lt;p&gt;Everything looked great in the logs, but no rules were enforced. After adding the binary and updating my bootstrap scripts, all the rules started working as intended.&lt;&#x2F;p&gt;
</content>
        
    </entry>
    <entry xml:lang="en">
        <title>Docker in Docker</title>
        <published>2025-10-05T00:00:00+00:00</published>
        <updated>2025-10-05T00:00:00+00:00</updated>
        
        <author>
          <name>
            
              Unknown
            
          </name>
        </author>
        
        <link rel="alternate" type="text/html" href="https://suchaboris.com/blog/docker-in-docker/"/>
        <id>https://suchaboris.com/blog/docker-in-docker/</id>
        
        <content type="html" xml:base="https://suchaboris.com/blog/docker-in-docker/">&lt;p&gt;For people who already knew this, it might be trivial, but I learned something interesting last week.&lt;&#x2F;p&gt;
&lt;p&gt;I knew you can run pretty much anything in &lt;strong&gt;Docker&lt;&#x2F;strong&gt;. And I knew Docker with &lt;strong&gt;Compose&lt;&#x2F;strong&gt; or equivalent tools can be used to run a whole dev environment or something like &lt;strong&gt;Testcontainers&lt;&#x2F;strong&gt;. I&#x27;d even heard at some point that you can potentially run &lt;strong&gt;Docker inside Docker&lt;&#x2F;strong&gt;, but I either didn&#x27;t pay attention or had no use for it. And that&#x27;s what blew my mind when I tried it last week.&lt;&#x2F;p&gt;
&lt;p&gt;As I&#x27;m building out my &lt;strong&gt;homelab&lt;&#x2F;strong&gt;, I set up a full &lt;strong&gt;Kubernetes&lt;&#x2F;strong&gt; cluster in a &lt;strong&gt;devcontainer&lt;&#x2F;strong&gt;, and I can easily test new deployments locally. Using my own &lt;strong&gt;YAML&lt;&#x2F;strong&gt; or &lt;strong&gt;Helm&lt;&#x2F;strong&gt;—it doesn&#x27;t matter. Everything is in a container. The whole &lt;strong&gt;K8s&lt;&#x2F;strong&gt; cluster inside Docker. What? It still blows my mind.&lt;&#x2F;p&gt;
&lt;p&gt;If you want to see how I set it up, check out my &lt;a rel=&quot;external&quot; href=&quot;https:&#x2F;&#x2F;github.com&#x2F;prymost&#x2F;homelab&#x2F;tree&#x2F;main&#x2F;.devcontainer&quot;&gt;Homelab DevContainer configuration&lt;&#x2F;a&gt; on GitHub.&lt;&#x2F;p&gt;
</content>
        
    </entry>
    <entry xml:lang="en">
        <title>My OS Bootstrap Scripts</title>
        <published>2025-09-21T00:00:00+00:00</published>
        <updated>2025-09-21T00:00:00+00:00</updated>
        
        <author>
          <name>
            
              Unknown
            
          </name>
        </author>
        
        <link rel="alternate" type="text/html" href="https://suchaboris.com/blog/my-os-bootstrap-scripts/"/>
        <id>https://suchaboris.com/blog/my-os-bootstrap-scripts/</id>
        
        <content type="html" xml:base="https://suchaboris.com/blog/my-os-bootstrap-scripts/">&lt;p&gt;For many years, I&#x27;ve had scripts I&#x27;d run on a new &lt;strong&gt;MacBook&lt;&#x2F;strong&gt; to bring it up to the state I need with all the apps and settings I want. But for some reason, only recently I realized I need this for all of the operating systems I use.&lt;&#x2F;p&gt;
&lt;p&gt;Playing with VMs lately made it even more useful as I switch between &lt;strong&gt;Mac&lt;&#x2F;strong&gt;, &lt;strong&gt;Windows&lt;&#x2F;strong&gt;, and &lt;strong&gt;Linux&lt;&#x2F;strong&gt;. With Mac and Linux, everything was pretty easy. It&#x27;s with Windows is where I really appreciated &lt;strong&gt;AI&lt;&#x2F;strong&gt;, as I don&#x27;t have the time or patience to dive into &lt;strong&gt;PowerShell&lt;&#x2F;strong&gt;.&lt;&#x2F;p&gt;
&lt;p&gt;And now I have a &lt;a rel=&quot;external&quot; href=&quot;https:&#x2F;&#x2F;github.com&#x2F;prymost&#x2F;os_bootstrap&quot;&gt;repository&lt;&#x2F;a&gt; I can easily pull and set up a brand new OS with everything I need and the way I like it. These are quite personalized, but if anyone wants to, you can definitely use it as inspiration.&lt;&#x2F;p&gt;
</content>
        
    </entry>
</feed>
