August 20, 2026

Docker Engine 29 Breaking Changes: What Actually Breaks on a Linux Server

The API floor moved twice, the image store only changes on fresh installs, and every container's file-descriptor limit quietly dropped from 1048576 to 1024. Nine months of fallout, checked against upstream.

August 17, 2026

Ubuntu 24.04 to 26.04 LTS on Production Servers: What Actually Breaks

The upgrade path opens on 27 August with 26.04.1. Six defaults changed underneath you, and one of them can leave a cloud instance that never boots again.

August 16, 2026

Post-Quantum SSH and TLS: What to Actually Change on Your Servers in 2026

Key agreement is solved and shipping; signatures are not. A working guide to auditing and fixing SSH and TLS on real infrastructure.

August 15, 2026

Ingress NGINX is retired: migrating to Gateway API without breaking production

The controller that fronts about half of all cloud native environments was archived in March 2026. A practical migration guide: what actually breaks, what ingress2gateway will not convert, and a rollout you can reverse.

August 14, 2026

MCP security in production: hardening Model Context Protocol servers and AI agents

What the MCP specification already mandates, what the 2026 coding-agent CVEs actually broke, and the controls that hold: audience validation, tool pinning, sandboxing, egress policy and audit.

August 5, 2026

DevOps vs MLOps vs LLMOps: how generative AI reached production

A documented history from DevOps to MLOps and LLMOps, plus a production guide to prompts, RAG, evaluations, observability, security and cost.

Agentic AI in 2026: Hermes, NVIDIA Nemotron and the open-model stack

Agentic AI is less about bigger models and more about reliable tool use. A field guide to the open-weight stack — Nous Research’s Hermes and NVIDIA’s Nemotron — and how to build agents that do not fall over.

Copilot Studio + Microsoft Fabric: building an agent that reads your data lake

Microsoft Fabric puts your data in OneLake; Copilot Studio lets you build agents on top of it. Here is how the two connect — grounding, the SQL endpoint, Fabric data agents — and the traps to avoid.

Databricks Lakehouse: where the data lake finally meets the warehouse

Data lakes are cheap but messy; warehouses are fast but rigid. The lakehouse pattern — Delta Lake, Unity Catalog and the medallion architecture — is how Databricks fuses both. Here is what actually matters.

Published May 24, 2026

Keycloak vs Entra ID: the real tradeoffs nobody puts in a comparison table

Two decades of IAM experience condensed into a candid comparison: licensing maths, protocol flexibility, Conditional Access, migration pain, and why most enterprises end up running both.

Published May 27, 2026

Hermes Agent vs OpenClaw: why I switched and what the benchmarks miss

A hands-on comparison of the two leading open-source AI agents: persistent memory vs plugin ecosystem, seven-layer security vs plugin CVEs, skills vs 5,700 plugins, and why Hermes wins for long-term workflows.

Published May 21, 2026

Is SailPoint worth it? An honest assessment of cost, complexity, and alternatives

A candid look at SailPoint’s real value: certification excellence vs implementation pain, BeanShell debt, upgrade nightmares, and when you should pick something else.

Published May 18, 2026

SailPoint BeanShell and custom connectors: the production developer’s purgatory

The real-world pain of BeanShell rules and custom connectors in SailPoint IdentityIQ: null traps, silent failures, BuildMap errors, and what changes when you move to ISC.

Published May 15, 2026

SailPoint IIQ to ISC: what nobody tells you about the migration

The hard truths about migrating from SailPoint IdentityIQ to Identity Security Cloud: what breaks, what gets lost, and why your custom Java rules are now a liability.

May 10, 2026

Keycloak high availability: patterns that survive a production outage

Production patterns for running Keycloak in HA mode: database replication, Infinispan rebalancing, load balancer config, and what happens when a node disappears.

May 13, 2026

Keycloak fail recovery: what breaks and how to fix it

A practical guide to Keycloak recovery scenarios: split-brain in Infinispan, corrupted database sequences, stuck migration, dangling sessions, and broken trust stores.

April 30, 2026

Boring cloud architectures that survive growth

Three principles I keep coming back to when teams ask me what their cloud should look like once it stops being a prototype.

• Cloud
• Architecture
• Postgres
• Reliability

April 25, 2026

IAM that scales: human roles, machine roles, blast radius

A practical mental model for designing IAM that survives growth without turning into the team that rubber-stamps wildcards.

• IAM
• Security
• Cloud
• Architecture

April 22, 2026

Calm AI platforms: shipping intelligence without burning out the room

Three patterns I lean on to bring modern AI into enterprise platforms without turning the team into permanent firefighters.

• AI
• Platform
• Architecture
• Claude

April 18, 2026

Local AI on a Mac: what fits in 16 GB without lying to yourself

A practical map of which local AI workflows are real and which only look real, on a Mac with 16 GB of unified memory.

• AI
• Local AI
• macOS
• Ollama
• MLX

April 12, 2026

Systemd timers vs cron: when to choose what

A pragmatic decision guide for picking between systemd timers and cron, written from the trenches of running both for years.

• Linux
• systemd
• cron
• Operations

April 5, 2026

macOS dev environment without the Homebrew bloat

How I keep a fast, repeatable Mac dev setup without ending up with 600 packages I cannot account for.

• macOS
• Homebrew
• mise
• Developer Experience

March 28, 2026

Kubernetes for the resistant: when not to use it

I have run Kubernetes in production for years. Here are the four signals that tell me a team should not be running it yet.

• Kubernetes
• Architecture
• Platform
• Pragmatism