Structured YAML diffs for Helm
Helm diffs used to be misleading unified-diff hunks buried in noise - and once an AI review stage started reading them too, that noise started costing tokens and time. Here's how we made this smarter.
Nuvotex Blog
Information for heros working in information technology.
Live Last read · last published · next check
Latest posts
FortiGate: Missing Policy on Virtual Server Causes Silent Drop
Traffic was routing correctly, policies looked clean, and the flow debug showed no denial - yet the connection stalled.
LVM cache and mismatched logical block sizes
LVM cache needs the origin and cache disks to share the same logical sector size (512 vs 4096). If they differ, LVM errors out.
SAS Drives Showing 0B in lsblk and Missing from Multipath: The 520-Byte Sector Problem
Enterprise SAS SSDs repurposed from storage arrays often arrive formatted with 520-byte sectors — a T10 DIF/PI integrity field used by array controllers that Linux cannot handle. The kernel rejects the drive entirely, reporting 0B in lsblk and leaving multipathd with nothing to work with.
Enhanced RDP Security: Understanding Microsoft's New Phishing Protection Mechanism
Microsoft has introduced a robust two-tier security system to protect users from malicious Remote Desktop Protocol (RDP) files. This enhanced phishing protection mechanism adds crucial verification layers that help organizations maintain secure remote access while protecting against sophisticated social engineering attacks. The Two-Part Security Framework Part 1: Digital Signature Verification
rook ceph - unmap stuck rbd
You might find yourself in a situation where you need to push rook ceph a little to unmount RBDs in order to unblock PV operations.
Online removal of a LUKS disk encryption
Believe it or not - sometimes there might be cases when you need to actually remove encryption from a system. This guide will let you know how to remove LUKS from a virtual machine when the root partition is running on this disk.
Prepending Environment Variables with Kyverno: Finding the Right Approach
Injecting environment variables into Kubernetes pods with Kyverno requires careful strategy. While `patchStrategicMerge` only appends to arrays, `patchesJson6902` with `add` operation at index `0` successfully prepends variables, preserving existing configurations.
ceph 20.2.0 (tentacle) released
Ceph 20 is out - and you should get your hands on it!
terraform actions - I like hooks and I cannot lie
Terraform 1.14 beta brings actions - a decent approach to run one shot events on state transitions. Check out this post to see an example and how it can be done already today.
Using kyverno to generate secrets
Sometimes it's the little helpers that make the difference. Here's some kyverno policy you can use to generate secret values in Kubernetes through a mutating webhook.
Helm & variable scopes
When using variables to track state across loop iterations in Helm templates, declare them outside the loop scope or they'll reset on each iteration.
OpenVPN DCO part of linux kernel
openvpn dco will be part of linux kernel 6.16 - that's huge and you should have this on your radar to benefit from huge performance gains!
Terraform map expansion - interface ranges
Expanding value ranges dynamically in terraform can help you to compact your configuration and keep the focus on the values. It takes a few moments to expand the values using regex magic, still it's worth the effort!
Zabbix Server not running after upgrading to 7.4.0
Upgrading a self-hosted Zabbix instance sounds like a straightforward task, right? That’s what I thought until I upgraded to version 7.4.0