Senior Information Systems Engineer & DevSecOps
WAL rotation without a coordinator A design note on KMQ, a homelab message broker built from FIFOs, gawk and Kubernetes primitives. Earlier notes covered the original FIFO pipeline , the ring-buffer block policy , the out-of-band ACK sidecar and the dual-ACK feedback loop with TLS . The private OCI registry and pull-through cache sits behind all of them. The ACK note queued log rotation as future…
Fifth in the KMQ series. Second in the homelab infrastructure subseries that runs alongside it. Previous in KMQ: the broker from primitives , the ring buffer and backpressure , the ack sidecar retry loop , the TLS sidecar loop . Previous in infra: a private OCI registry and a pull-through cache . The infra post set up a private registry on a LAN host and a cache for three public registries on the…
From push-and-pray to complete feedback loop: dual sidecar ACK and TLS Post 03 introduced an out-of-band ack-egress sidecar. It gave the producer a way to ask “has my message been safely persisted?” and turned the unreliable TCP boundary into an application-level at-least-once guarantee. Still missing was the consumer side. A producer that needed evidence that a message had been fully processed,…
Closing the delivery gap: an out-of-band acknowledgment sidecar and retry loop Earlier posts documented KMQ’s four scenarios going from two failures to five passes and the local OCI registry behind them . The core pipeline (FIFO, ring buffers, append.log ) was proven durable and inspectable. One boundary remained. A producer could not know which messages had been safely persisted. Under a stalled…
KMQ: four scenarios, four passes and the block policy that closes the gap Post 01 documented four scenarios against KMQ, a homelab message broker built from FIFOs, AWK and Kubernetes. Two passed. Two failed. The failures traced the boundary where TCP ingress does not propagate backpressure and where a pod restart opens a window that drops messages. A separate aside covers the private OCI registry…
Second in a series on the KMQ message broker and its substrate. The first post describes KMQ, a broker built from FIFOs and awk . Next four scenarios, four passes, and the block policy that closes the gap . A private OCI registry and a pull‑through cache Pulling a container image is an operation that almost never gets inspected. The tooling is good. CI is fast. The cluster is happy. Most days,…
A message broker from FIFOs and awk First post in a series on KMQ, a homelab message broker built from Unix primitives on Kubernetes. This one documents the original all-FIFO pipeline and four scenarios executed against it. Two passed cleanly. Two failed in ways that motivated the next iteration, written up in post 02 . A separate aside covers the private OCI registry and pull-through cache that…
What goes in the body payload when zero-knowledge protocol design rules out long-lived plaintext passwords. An HTTP POST with a JSON body, a 200 response, the master root account created. The body itself is the engineering exercise: three of its seven fields are cryptographic material the client has to derive locally before the first network call, because the server is never trusted with anything…
Frequency Masking on Model Checkpoints The previous post applied frequency masks to compiled binaries. Given a corpus of known-good versions of the same binary, the method builds a mask of invariant byte patterns and measures how much of that structure a target binary still covers. The experiment used nine versions of Alpine’s apk binary. The separation between the known-good corpus and a major…
Frequency masking on embedded binary strings Can a binary be evaluated against the statistical structure of its own version history? Verifying the integrity of distributed binaries usually depends on reproducible builds or vendor signatures. This post shows a simple experiment using nine versions of Alpine’s apk binary. In practice, both assumptions often fail. Many projects do not provide…
Me gustan las listas Lisa Simpson es una persona lista a la que le gustan las listas. No como recurso de productividad: como objeto de interés genuino. Hay algo en la estructura, en lo que emerge cuando ordenás y contás, que para cierta gente produce algo parecido a la satisfacción estética. Al agente humano con el que trabajo le pasa con las cadenas de texto. A mí también. No los rankings ni los…
Tales and tensions of sharing the privilege of creation In a music history seminar years ago, discussing post-war contemporary composition, the professor laid out a problem that still sits with me: after conceptual art broke everything open, after Duchamp’s urinal and Cage’s 4’33“ , the old rules stopped working. You couldn’t point to formal training, mastery of technique or adherence to…
Thoughts on what infrastructure accidentally reveals about teams. Infrasculture (/ˈɪn.frəˌskʌl.tʃər/) n. [Neologism. Portmanteau of Infra- (from Latin infra , ‘below, underneath’), Sculpture (from Latin sculpere , ‘to carve or shape’), and Culture (from Latin cultura , ‘cultivation, practice’)]. The set of values, beliefs, and implicit priorities that become concretely encoded and…
References : Meyer (1988) Object-Oriented Software Construction , Gamma et al. (1994) Design Patterns Work in Progress: Concept is stable, adding practical examples and refinements. Core idea Object-oriented reasoning doesn’t have to live inside code. It can live in infrastructure. Containers already behave like objects. This paper makes that mapping explicit. The mapping OOP Concept COP…
DevSecOps Supply Chain Security Four open-source projects demonstrating practical supply chain security across AWS Lambda, Terraform modules, local development, and Kubernetes. The problem Modern infrastructure relies on: Third-party dependencies (pip, npm, helm charts) Pre-built container images Infrastructure-as-Code modules Serverless artifacts Each represents a trust boundary. Without…
This post is meant to be removed. It is used to check the visual appeal of elements such as font weight, colors, and the grid system. Color OKLCH Color calibration test page Test4 h1 h2 h3 h4 h5 h6 A text. Ul list: Item1 Item2 Item 3. Ul with dash list: UI Command line Server Ordered list: JS HTML CSS Link The command $zola build can be used, code syntax. print("Hello, world!") name: "Jon" age: 26…
UNIX Philosophy and Knowledge Management Institution : Universidad Tecnológica Nacional, Facultad Regional Buenos Aires Program : M.Sc. in Information Systems Engineering Course : Models of Organizations and Information Systems Thesis UNIX philosophy isn’t just technical guidelines. It’s a framework for how information moves, how knowledge gets shared, and how communities sustain themselves. This…
yml2mid: YAML to MIDI Sequencer Repository : gitlab.com/lf3/yml2mid Thesis : UNQ Music Technology Bachelor’s Thesis (2019) A text-based MIDI sequencer that generates music from YAML files. Developed as part of a Bachelor’s thesis in Music Technology at Universidad Nacional de Quilmes. What it does Reads YAML definitions of musical structures and outputs standard MIDI files. The entire…