lcanello

Personal site of lcanello

← home

tag: devops

DungBeetle

Lightweight distributed job server for queuing and asynchronously executing heavy SQL read jobs — supports MySQL, PostgreSQL, and ClickHouse as sources, writes results to ephemeral result databases, and exposes an HTTP API for job and group management.

Google Workspace CLI (gws)

One CLI for all of Google Workspace — Drive, Gmail, Calendar, Sheets, and more. Dynamically built from Google's own Discovery Service at runtime, with structured JSON output and 100+ bundled AI agent skills.

aquasecurity/trivy

Trivy — open-source vulnerability and misconfiguration scanner for containers, IaC, repositories and runtime environments. Repository with code, documentation, and integrations for CI/CD security scanning.

infra-ansible

infra-ansible is an Ansible repository for provisioning and automating infrastructure components such as DNS, DHCP, OpenStack, storage, bastions, and identity-managed hosts.

Ghostty Leaving GitHub

Mitchell Hashimoto announces that the Ghostty terminal emulator is leaving GitHub — discussing the reasons behind the migration and what it means for the project's future

Kubernetes The Hard Way

Kelsey Hightower's classic tutorial for bootstrapping Kubernetes manually — no scripts, no automation. Learn etcd, control plane, worker nodes, TLS certs, and pod networking by walking the long route

CLR

Checker for Lifetimes and other Refinement types for Zig. Transpiles AIR to Zig source performing static compile-time analysis — checks use-before-assign, use-after-free, double-free, stack pointer escapes, non-nullness assertions, tagged union violations, fieldParentPtr misuse. MIT license

Capistrano

Capistrano — remote server automation and deployment tool. Ruby-based, SSH-driven, multi-stage deployments, rollback, hooks, scripting. Originally for Ruby/Rails, now supports any language/framework

Chef Infra

Chef Infra — configuration management platform for automating cloud infrastructure. Policy-driven, idempotent, Ruby-based DSL. Chef Infra Server, Workstation, InSpec for compliance, Chef Automate for analytics

chezmoi

chezmoi — manage your dotfiles, directories, and files securely. Git-backed, encrypted, cross-platform. CLI tool for version control and synchronization of your development environment

Crafty

Crafty — configuration management tool by VoxPupuli. Puppet-based, declarative infrastructure, module-driven, CLI and API. Simplifies Puppet module development and deployment

Crossplane

Open-source Kubernetes control plane for building, publishing and using APIs. Use your own API providers, extend to match your infrastructure, CRDs, no vendor lock-in

example42

Open-source configuration management, monitoring, and automation tools. Puppet, Ansible, SaltStack modules. Monitoring (Munin, Prometheus), log management, IT automation. Core42, UAA, Smart42 products

Fleet

Fleet — lightweight VM management. Run Linux and Windows on bare metal, VMs, cloud, edge. Fleetctl CLI, REST API, Terraform provider. Containerized, PostgreSQL, no external dependencies

Kurier

Kurier — end-to-end encrypted messaging app with self-destructing messages. Open source, cross-platform, open protocol, self-hostable, metadata harvesting resistant. Written in Rust, uses X25519, AEAD encryption, and the libsignal protocol

NetDisco

Network device discovery, port scanner, and mapping tool for IP, MAC, and VLAN tracking. Lightweight, agentless, no downtime, no custom database. Written in Perl with modern tools (nmap, scapy). Supports Junos, NCM, OpenWRT, and more

OpenVox

OpenVox — Puppet module framework by VoxPupuli. Simplifies module development, testing, and publishing. Supports Puppet 4+, structured data, Hiera integration, CI/CD pipelines, community-driven

osctrl

osctrl — management server for osquery. Centralized configuration, tags, environments, and live queries. Go-based, Docker support, PostgreSQL/MySQL, web dashboard for endpoint management and monitoring

osquery

osquery — SQL-powered operating system instrumentation, monitoring, and analytics. Facebook OSS. Query Linux, macOS, Windows processes, files, network, registry. Fleet, Osqueryd, Osqueryctl, REST API, PKG/DEB/RPM packages

pgrwl

Cloud-native continuous backup for PostgreSQL in a single binary — WAL streaming, scheduled base backups, optional S3/SFTP storage backend, compression, encryption, retention, restore command. Implements streaming replication protocol directly, no external schedulers or extra services

Puppet Labs

Puppet Labs — configuration management, automation, and infrastructure-as-code. Puppet Enterprise, Open Source, R10k, Hiera, Facter, PuppetDB, Bolt. Ruby-based DSL, declarative approach to system administration

rustinel

Rust implementation of INI file parser and validator. Zero dependencies, no unsafe code, no unsafe Rust. Supports INI4 and INI5 formats, includes CLI tool for validation, streaming parsing, error recovery, comments and whitespace handling, documentation and examples

Semaphore UI

Semaphore UI — modern UI and API for Ansible, Terraform, OpenTofu, Bash, PowerShell. Pure Go, Docker/K8s support, MySQL/Postgres/SQLite. RBAC, HA, runners, 13K+ GitHub stars

Postmortem: TanStack npm supply-chain compromise

Comprehensive incident postmortem on the June 11, 2026 compromise of @tanstack/* packages. Attack used pull_request_target pattern, GitHub Actions cache poisoning, and OIDC token extraction. 84 malicious versions, 2.3MB obfuscated router_init.js, self-propagating malware, credential harvesting from AWS/GCP/K8s/Vault/GitHub/SSH

The Foreman

Open-source lifecycle management platform for physical and virtual servers. Provisioning, configuration management, monitoring. Puppet, Ansible, Salt, Chef integration. REST API, plugins, web UI

ClusterControl Getting Started

Documentation for ClusterControl, an all-in-one database management platform for deploying, monitoring, and automating high-availability clusters across MySQL, PostgreSQL, MongoDB, Redis, and more.

acme.sh

A pure ISO shell script implementing the ACME protocol — a lightweight, pure-shell alternative to Certbot for obtaining SSL/TLS certificates from Let's Encrypt.