Cloud Native Rejekts is continuing and the community is leading the way! 🚀 We’ve made the decision to support Rejekts Amsterdam on March 21st, fully community‑organized 🇳🇱

📣 The CFP is now open! https://sessionize.com/cloud-native-rejekts-eu-2026
Please submit, share, and encourage others to get involved.

Rejekts will be locally organized by a team of volunteers. If you want to help organize Amsterdam, now’s the time to define event roles, promote the CFP, talk to sponsors, and start scouting venues & A/V. The CNR team will collaborate with event orgs in the new year.

Thank you to everyone for the passion, care, and commitment you've shown. Rejekts deserves a future that’s stable, inclusive, authentic, and truly community-driven. 💜

The Cloud Native Rejekts team

One of the wild things about #Kubernetes is the variation in configurations between distributions.

An odd one is that microk8s from Canonical, doesn't enable RBAC out of the box.

Even if you read their "getting started" tutorial, there's no mention of enabling it in the "important addons" section https://ubuntu.com/tutorials/install-a-local-kubernetes-with-microk8s#3-enable-addons !!

Now they did disable anonymous access by default, so no unauthenticated RCE, but it does mean that any workload deployed to the cluster gets automatic cluster-admin rights .... which is not great for a distribution billed as "the go-to platform for mission-critical workloads"

Doing what's necessary: Migrating #minio to #versitygw.

I didn't use replication in minio, so versitygw is a much better match for my use case anyway.

versitygw is a s3 frontend to a posix filesystem and it's even okay with concurrent access through other means. So I could serve a filesystem over s3 and cifs at the same time.

I thought minio did the same with replication disabled but it's backing store is not usable directly so I have to rclone my data out of there.

Oh true, happy 30th birthday, IPv6! 🎉

#IPv6

I cannot imagine a circumstance where a significant portion of my digital life were snapped out of my grasp in an instant. Family photos, videos, years of hard work and memories just taken away. I would be absolutely heartbroken.

To see so many people smugly responding to someone who had this happen, as apple suspended their account, in a 'well you should have done this!' or actually laughing at them directly in their replies is horrible. Have some fucking compassion, for fucks sake

So, some time ago I was playing with the idea of adding tracking to container images (https://raesene.github.io/blog/2023/02/11/Fun-with-Containers-adding-tracking-to-your-images/) .

the idea is that you add a URL to the config section of an OCI image and then whenever the image gets pulled, the URL gets called.

I can't remember exactly where I uploaded the image with the canary token in it, but someone's been pulling that image regularly for a while now and I get a ping whenever they do :)