E-Whisper

IPv6 Address Present but No Connectivity: A Complete Diagnosis of an iStoreOS ip6class Mismatch

Documenting a troubleshooting session where iStoreOS obtained an IPv6 address but could not reach the internet, traced to a mismatch among ip6class, delegate, and wan6.device, with the fix and verific

2026-11-09

Network Technology

#Tailscale #IPv6 #iStoreOS #OpenWrt #Network Troubleshooting

Moving Certificate Renewal from crontab to a Kubernetes CronJob

The design, secret management, rollback path, and three-layer verification strategy for moving certificate renewal from crontab to a Kubernetes CronJob, with a focus on the switchover points and the g

2026-11-06

CloudNative

#GitOps #Kubernetes #acme.sh #CronJob #Certificate Renewal

Homelab Domain Certificate Automation: acme.sh + Tencent Cloud/Qiniu CDN Deployment Pipeline

Issue a single multi-SAN certificate with acme.sh, deploy it automatically to Tencent Cloud CDN and Qiniu CDN through the --reloadcmd hook, and have cron check every 6 hours. Includes verification com

2026-11-06

DevOps

#acme.sh #Let's Encrypt #TLS Certificates #Tencent Cloud CDN #Qiniu Cloud #Homelab

Fully Removing Nix: Rebuilding the Local Toolchain with mise + uv, and Handing CI Over to a Single Self-Built Image

Remove Nix entirely from both local development and CI: Python goes to uv, binary tools go to mise, and on the CI side we build a single self-hosted image on the host machine while the pipeline only p

2026-11-05

DevOps

#DevOps #mise #uv #Nix #CI

Mending the Fold After a NAS Ransomware Attack

AI has pulled vulnerability discovery down to hours, and PHP2Shell and C3RB3R tore through internet-exposed NAS devices in the same week. But the point of this article is that closing one port forward

2026-11-05

Security

#Security #NAS #Ransomware #Synology #QNAP #PHP2Shell #C3RB3R #Patch Management #Backup

Node IPv6 Prefix Drift: The Silent Cross-Node Pod Network Failure Behind a "Just an Alert"

Behind a single kubelet secondaryNodeIP alert, cross-node IPv6 pod communication had already silently failed. This post documents the complete remediation, from evidence gathering and root cause analy

2026-11-03

CloudNative

#Kubernetes #Cilium #Networking #k3s #IPv6

No Application Could Reach the Database: An AppArmor Stacking Incident Misdiagnosed as a Network Failure

After a Ubuntu kernel upgrade, signal delivery inside containers was blocked by AppArmor stacking — gosu spun, database logs stayed empty, and applications reported no route to host. A walkthrough of

2026-11-03

CloudNative

#Kubernetes #containerd #Troubleshooting #Linux Kernel #AppArmor

K8s Best Practices Updated: Use Node Swap!

A record of changing memorySwap.swapBehavior from NoSwap to LimitedSwap in a k3s cluster via a kubelet drop-in, hardening it with Ansible, and rolling it out node by node with verification.

2026-10-17

CloudNative

#Kubernetes #k3s #NodeSwap #LimitedSwap #cgroup

k3s + Cilium + Tailscale Dual-Stack Network Overhaul: Evaluation, Experimentation, and Production Rollout

A record of the evaluation, experimentation, and production rollout of converting a homelab k3s cluster from IPv4-only to IPv4/IPv6 dual-stack, covering the control plane, Cilium IPAM, rollback plans,

2026-10-10

CloudNative

#Kubernetes #Cilium #Tailscale #k3s #IPv6 #Dual-Stack Networking

How to Find Unused Resources in a K8s Cluster?

A record of using kor to scan Kubernetes for unused resources — configuring Grafana dashboards, manually judging and cleaning up genuinely unused resources, filtering false positives, and setting appr

2026-10-10

CloudNative

#GitOps #Kubernetes #Grafana #Prometheus #kor