How a Kubernetes Service Actually Works (and All 5 Types You Need)
A pod gets created. It gets an IP. Then it dies. A new pod replaces it. New IP. Now imagine you have ten pods of the same app, and they restart all the…
All posts
191 posts · page 2 of 13
Day 7: Ship It - and What Comes Next
Your container runs as root and has 18 CVEs. A Docker Captain's guide to hardening, Scout policies, DHI, Sandboxes, and what comes after Docker.
Day 6: Run an LLM on Your Laptop - With Docker
"Pull AI models from Docker Hub, run them locally with GPU acceleration, and build an AI-powered app
A Kubeconfig for GKE That Doesn't Need gcloud
When you run gcloud container clusters get-credentials , the kubeconfig it writes looks innocent — until you hand it to a teammate and they hit: …or the…
Day 5: Docker Compose - How Docker Actually Gets Used
7 Days of Docker in 2026 - From docker run Chaos to Declarative Stacks Nobody types docker run with 15 flags in real life. I’ve been learning and working…
What Actually Happens When kube-scheduler Picks a Node (13 Stages Inside Kubernetes)
How kube-scheduler picks a node: 13 framework stages, 14 Filter plugins, 9 Score plugins, live preemption demo.
Day 4: Breaking Isolation on Purpose - Volumes, Networks, and the Real World
7 Days of Docker in 2026 — When Containers Need to Talk and Remember On Day 3, you built production-ready images with Dockerfiles, optimized layers, and…
Day 3: Stop Writing Dockerfiles From Scratch
Stop writing Dockerfiles from scratch. A Docker Captain walks through docker init, layer caching, multi-stage builds, and docker debug for 2026.
What Actually Happens When You Run kubectl run nginx
Every step of what happens when you run kubectl run nginx on Kubernetes. From argv to etcd Raft, scheduler, CRI, CNI, runc, and PLEG.
Day 2: Your Images Are a Supply Chain - and It's Probably Broken
7 Days of Docker (2026) - by Saloni Narang, Docker Captain & CNCF Ambassador I'm a Docker Captain. I've seen hundreds of Docker tutorials explain images…
Day 1: What Actually Happens When You Type docker run
Containers aren't VMs. They're Linux processes. A Docker Captain explains namespaces, cgroups, and how Docker really works on your Mac in 2026.
"SSH Into Your DGX Spark From Anywhere in the World Using Tailscale
Learn how to set up Tailscale on your NVIDIA DGX Spark for secure SSH access from anywhere in the world.
What Claude Code's Leaked Source Actually Teaches Us About Building AI Agents
512K lines of TypeScript, verified against actual source. The engineering patterns in Claude Code's leaked codebase that most coverage got wrong.
The Ingress NGINX Migration Just Got Easier: 119 Annotations, 3 Targets, Impact Ratings
"Ingress NGINX was archived March 24, 2026. ing-switch maps all 119 NGINX annotations with
clawspark: Your Private OpenClaw AI Assistant That Never Phones Home
Clawspark provides a way to Install openclaw on your device in a secure way with a single command.