Kubernetes Home Lab in 2025: Part 1 - CNI & GitOps
Last time , we left our Cluster in a semi-happy state: The nodes were up, the control plane was available, but we had no cluster network. Today, we will fix that, and a bit more.
DaTosh Blog
Recent content on DaTosh Blog
Latest posts
Kubernetes Home Lab in 2025: Part 0 - Bootstrapping the Cluster
First things first, we need some nodes that make up our cluster.
Kubernetes Home Lab in 2025: Introduction
The year was 2024, Cyber Monday was rolling by and my manager pointed out that I still had a budget available for training and certifications. One purchase of a Kubestronaut Certification Bundle and a few weeks later, I kinda have to face it: I need a new home lab.
Getting started with open source: Making my first contribution to Hugo.
Lots of people ask for advice on how to get started in open source.
The Hidden Risks of High-Quality Code
The daily struggles of a consultant as a software engineer.
Make Chrome go brrrrrr....
Everything started with a simple question: “Why does my laptop get hot watching YouTube?”, and led to a rabbit hole of hardware acceleration, Chrome flags, and Intel iGPU monitors.
Gitsign in Remote Environments
After attending SigstoreCon, I got inspired by Priya Wadhwa’s Keynote: Signing Git Commits with Gitsign , to finally set up gitsign for my dev environment. It seemed straightforward enough, right?
Bringing first-class support to SBOMs and attestations for Constellation containers
In a previous post , we explored how to generate a Software Bill of Materials (SBOM) and subsequently scan them for vulnerabilities . In this post, we show you how SBOMs can be signed and then stored in the same container registry as the scanned image. This improves security & discoverability!
My favorite tools to keep a zero vulnerabilities posture for Constellation
In our last post , we explored how Software Bill of Materials (SBOMs) provide us with a transparent view of all dependencies in Constellation. In this post, we explore how we can use this information to continuously monitor vulnerabilities and upgrade to patched versions as soon as they are available.
Generating SBOMs for Confidential Kubernetes is easier than you think!
Constellation is an infrastructure product and includes several different components:
Verify cosign signatures in go using sigstore/sigstore
After integrating cosign into the release process of Constellation ’s CLI, I also wanted to improve the supply chain security of our metadata that are used for attestation.
What can Confidential Computing do for the Kubernetes community?
This is a summary of the talk I gave at the Kubernetes Community Days (KCD) Berlin 2022. Both, the slides and a recording are available.
Postmortem: unRAID Flash Device Failure
Status: Complete, action items in progress. Summary: unRAID’s OS Flash Device failed undetected for 14 days, preventing server to successfully reboot, taking all internal services down, including pfSense VM which prevented home network from accessing internet.
Configure DNS:NET as ISP on pfSense Router
Since DNS:NET provides support only for a limited number of supported routers, and pfSense is not on that list, I will share my configuration here.
Control VirtualBox VMs via Batch
VirtualBox GUI is slow for repetitive tasks such as starting & stopping virtual machines. In addition, some tasks such as starting VMs headless is not possible at all.
Traefik 2 as Docker Reverse Proxy on unRAID
Setting up Traefik 2.x as Reverse Proxy for Docker Containers on unRAID 6.8.x