RSSAmplifier

Blog

Nahum Shalman

Open Source Software: Operating Systems and Beyond.

blog.shalman.orgRSS feed ↗15 posts

Latest posts

Triton on SmartOS bhyve

Motivation I (still) don't run VMware but I do have a SmartOS machine (it's a little nicer than the one from a decade ago). I now work on Triton for my day job and I want to run CoaL for some testing. Networking The first trick

Tailscale for SunOS in 2025

Happy New Year! The wireguard-go port is still sitting around in my fork. I don't know when I will have the energy for the next attempt to get it upstream. In the meantime, I've made some fun progress on the Tailscale side. Taildrive The Tailscale folks

OpenTelemetry Tracing for Dropshot

I spoke at Oxide 's dtrace.conf(24) about a project I've been hacking on for the past couple weeks: Slides: OpenTelemetry Tracing for Dropshot OpenTelemetry Tracing for Dropshot Nahum Shalman The QR code links to this presentation for anyone who wants to read the speaker notes

Tragedy Older Than Me

In July of 2021, in anticipation of the upcoming High Holy Days I purchased a copy of This Is Real and You Are Completely Unprepared: The Days of Awe as a Journey of Transformation by Rabbi Alan Lew, published in 2003. I was in fact completely unprepared to even read

Difficult Hardware

This content can also be found as part of https://github.com/tinkerbell/ipxedust/pull/88 in DifficultHardware.md . Most modern hardware is capable of PXE booting just fine. Sometimes strange combinations of different NIC hardware / firmware connected to specific switches can misbehave. In those situations you might want to

Private Web based IDE

These notes are a riff on a post by Chris Short . The biggest difference is that I will use the Tailscale TLS support rather than using external DNS access and a custom DNS record. This removes the need for a sensitive DNS API key. Chris's post is definitely

SSH SOCKS proxy but it's Tailscale

Have you ever run ssh -D 9999 somehost ? You might find the rest of this interesting. I'm not going to go into detail for the use cases of why you might want to use a SOCKS proxy with e.g. your web browser, but if, like me, you&

Tailscale for illumos

Current status: Up to date with Tailscale 1.24.2. My SMF manifest and build script are checked in to my branch. I've added notes on how to set up an exit node.

A Four Axis Model of Work

Mission, Technology, Culture, Compensation

Silly SmartOS hack: ipf/ipnat in lx zones

Someone on IRC in #smartos was asking about how to turn on NAT in lx branded zones. I was pretty sure it should be possible, and found myself nerd-sniped into figuring out the exact solution. I don't think I particularly recommend doing this, but figuring out how to

ZFS send/receive

A few weeks back I needed to migrate an entire ZFS pool from one machine to another. I used raw send to keep the stream compressed, and I used mbuffer to smooth out the send/receive (see the reference link at the bottom) First, prepare the receiving end by creating

Migration Notes

Some notes I took down as I stood up my new zone hosted by https://mnx.io.

Upcoming Downtime

Just a heads-up that I have to migrate my domain off of the JPC and there will probably be a downtime of my blog and other services for an unknown duration (though I'll do my best to keep it as short as possible) to complete the migration. It

Wireguard - Android Road Warrior

Motivation There are a lot of blog posts and wiki pages about how to set up Wireguard , but I still had to do a bunch of trial and error to come up with a configuration that worked for me. I have two goals: Secure all traffic from my Android phone

Silly tricks with Docker in the JPC

Message from 2018: I was going through my blog post drafts and found this post. I've made few small tweaks to it that seem to be what I was hoping to add before publishing. If you've ever wanted to replace your SSH access to a native