Ivan on Containers, Kubernetes, and Backend Development


Hi friends!

Ivan's here, with a monthly roundup from iximiuz.com.

I just finished an article on Kubernetes, and as always, it took me million hours to get from the first draft to a decent quality write-up. For better or for worse, there is no such thing for me as quick writing. But now it's getting late over here, so I'll have to keep the newsletter rather short.

SPONSORED Passwords are secrets, but secrets tend to leak. Certificates might be superior to passwords in many cases, but they are also secrets after all. Check out this good read by Teleport to learn How to Access Infrastructure Without Usernames and Passwords using provable identities. The future is bright and passwordless!


​

What I Was Working On

​Continuing the June theme, I managed to find some time in July to work on my (not so) secret Kubernetes UI. The visualizations are much smoother now (check out that rolling Deployment recording below), but the rest of the changes were mostly plumbing and hardening, so no new functional to demo yet.

​


​

What I Was Writing

There is one but rather big article I'd like to share this month: How Kubernetes Reinvented Virtual Machines. This article might feel less technical than my usual writing, but the intent was to tell a relatable story. It's based on my 10+ years of experience and observation of how people develop, deploy, and operate web services. And it's an illustrated one! Just to give you some taste:

I've also been pretty active on Twitter and published a few threads you may find interesting (or controversial):

Last but not least, DockerSlim officially announced its Docker Compose support. Now you can optimize images that are a part of the compose service definition with a single command. And while I didn't participate in the technical implementation of this feature, I'm happy to share the news πŸŽ‰


​

What I Was Reading


​

Stay Tuned

And this is it for July. Stay safe and healthy!

Cheers,

Ivan Velichko

​

Ivan Velichko

Building labs.iximiuz.com - a place to help you learn Containers and Kubernetes the fun way πŸš€

Read more from Ivan Velichko

Hello πŸ‘‹ Ivan's here with a slightly delayed September roundup of all things Linux, Containers, Kubernetes, and Server Side πŸ§™ What I was working on This month, I worked on an assorted set of topics. Skill Paths First off, the skill paths! I finally finished the underlying machinery, and now iximiuz Labs supports a new type of content - short roadmaps that you can use to develop or improve a specific skill: how to debug distroless containers, how to copy images from one repository to another,...

Hello friends! Ivan's here with another monthly roundup of all things Linux, Containers, Kubernetes, and Server Side πŸ§™ The issue's main topic is iximiuz Labs' largest-ever upgrade: Fresher and more streamlined look of the frontend UI πŸ’™ A new 5.10 Linux kernel built with nftables support (finally, we can try out kube-proxy's nftables mode). New default playground user - laborant (yep, rootless containers learning for). New playgrounds: Ubuntu 24.04, Debian Trixie, Fedora, and Incus (yay! more...

Hello friends! Ivan's here with a slightly delayed July roundup of all things Linux, Containers, Kubernetes, and Server Side πŸ§™ What I was working on This month, I got nerd-sniped by cgroups. It all started when I ran into a pretty significant difference in how Docker and Kubernetes handle the OOM events. When you limit the memory usage of a multi-process Docker container, the OOM killer often terminates only one of the processes if the container runs out of memory. If this process is not the...