Practical articles on AI, DevOps, Cloud, Linux, and infrastructure engineering.
GitHub Actions OIDC gets all the attention, but GitLab, Buildkite, and CircleCI issue the same signed tokens. Here's how to trust them without opening a hole.
Datadog does everything and bills you for all of it. SigNoz covers the core APM story on your own ClickHouse. Here's when the trade is worth it.
OTel promises no lock-in, vendor agents promise zero-config depth. Here is where each one actually earns its keep once you run it in production.
A practitioner's guide to picking a GPU cloud for training and inference, where hourly rates for the same H100 can differ by 3x.
Spot cuts compute bills by 60-90%, but AWS can take the machine back in two minutes. Here's how we run real production on it without paging anyone.
Static keys leak and live forever. Short-lived credentials from STS and Vault expire on their own — here's the token-exchange machinery and the TTL math that make it work.
A field-tested checklist for cutting an AWS bill, ordered by return on effort. Start with the free wins, end with the ones that need a meeting.
Grafana pulls metrics from anywhere, Kibana lives and dies with Elasticsearch. Here's how we pick between them without ending up running both by accident.
New Relic's pricing swings and feature gaps push teams to shop around. Here's a field-tested look at seven alternatives, who each one fits, and how to move.
Verifying signed tokens at the edge with WebCrypto blocks bad traffic early and saves a full origin hop. Here's the pattern we ship, and the traps.
A field guide to the FinOps tooling that actually earns its keep in 2026, from native dashboards to CloudZero and Cast AI, sorted by what you spend.
Datadog's bill has a way of tripling the quarter you actually start using it. Here are eight alternatives we've run in production and what each one costs you.
