IfNotPresent Can Hide Image Changes During Testing
How pull policy interacts with mutable image tags and node caches.
containers
Rollback in GitOps Is Simple Only When Releases Are Identifiable
Connecting Git reverts, ArgoCD reconciliation, and immutable artifacts into one recovery model.
Container Running, Healthy and Useful Are Three Different States
A production-engineering deep dive into container running, healthy and useful are three different states, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
How cAdvisor Became One of My Largest Workloads
A production-engineering deep dive into how cadvisor became one of my largest workloads, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
What a Better Registry Strategy Would Look Like for Voiceware
A production-oriented path from local-style image names to controlled artifact distribution.
Why 0600 Was Too Strict for a Containerized Private Key
The strictest-looking file mode is not automatically the safest usable mode when a non-root service must read the key.
Container Count Is Not a Memory Budget
Counting containers does not tell you how much pressure a server is under. One container may do very little while another holds data, caches, and many threads. Two servers with the same container count can have very different resource needs.
The Build/Deploy Boundary Is Where Many Platform Bugs Hide
How image identity, chart values, and runtime resolution meet at one interface.
OpenBao 2.6 Changed the Memory-Hardening Assumption
Version-aware hardening matters because a security control can disappear or change semantics between releases.
How I Took cAdvisor from ~428 MiB to ~20–28 MiB
A production-engineering deep dive into how i took cadvisor from ~428 mib to ~20–28 mib, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
A Docker Storage Cache Needs Its Own Freshness Metric
A production-engineering deep dive into a docker storage cache needs its own freshness metric, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
Image Names Are Part of the Deployment API
Why repository, tag, and pull policy deserve review like any other runtime contract.
Tailscale with Docker: Host-Level Tailnet or Per-Container Sidecar?
I choose the networking boundary before I add Tailscale to a Docker stack, because the two patterns create different operational models.
Restart Counts Without Context Create Noise
A production-engineering deep dive into restart counts without context create noise, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
One Image, Multiple Processes: Voiceware’s Celery Pattern
Reusing the Django application image for several worker roles while changing how the container starts.
Why Immutable Tags Make Rollback Boring
How precise image identity simplifies GitOps recovery.
Build Once, Promote the Same Image
Why I prefer environment configuration to change without rebuilding application bytes.
Memory Limit Utilization vs Working Set: Which One Should Page Me?
A production-engineering deep dive into memory limit utilization vs working set: which one should page me?, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
OOM Events Are Better Evidence Than “High Memory” Alone
A production-engineering deep dive into oom events are better evidence than “high memory” alone, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
Docker Filesystem Scanning Was More Expensive Than the Metric Was Worth
A production-engineering deep dive into docker filesystem scanning was more expensive than the metric was worth, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
Container Block I/O and I/O Pressure Tell Different Stories
A production-engineering deep dive into container block i/o and i/o pressure tell different stories, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.
Monitoring Tax: Why Exporters Need Resource Budgets
A production-engineering deep dive into monitoring tax: why exporters need resource budgets, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.