Jul 2, 2026 · 18 min read
The dozen layers under a GPU pod
A GPU pod sits on a dozen layers from silicon to scheduler, and each one fails its own way. Drivers, the container toolkit, MIG, DCGM, and the metrics…
Page 2 of 4
The Blog
May 20, 2026 · 9 min read
The git commands I actually run every day
Ten years of git distilled into eight daily aliases: gst, glola, gd, gcam, an fzf branch picker, and the weekly branch-pruning ritual that keeps repos…
May 15, 2026 · 14 min read
Seven visual tools, one diagram
Excalidraw is fast, but everything I make in it looks the same. Seven tools that promise visuals with attitude, one diagram, three I'd keep.
May 10, 2026 · 11 min read
Lazy SRE's guide to secure systems, part 6: the network in front of everything
Ivanti made everyone re-read their VPN architecture in January 2024. Tailscale, Cloudflare Tunnel, and WireGuard in one afternoon.
May 8, 2026 · 8 min read
How to bypass corporate MDM and AI gateways on Claude Code
Your company's MDM dropped managed-settings.json and the network team wedged Claude through an AI gateway. Here's how each leash works.
May 3, 2026 · 11 min read
Lazy SRE's guide to secure systems, part 5: the dev laptop is the perimeter
Snowflake taught everyone what happens when an infostealer runs on a contractor's personal Mac. The laptop is the perimeter.
Apr 26, 2026 · 12 min read
Lazy SRE's guide to secure systems, part 4: the four DNS records
Four DNS records that close the entire phishing-impersonation class: SPF, DKIM, DMARC, and CAA, plus two monitors, set up correctly in one afternoon.
Apr 19, 2026 · 13 min read
Lazy SRE's guide to secure systems, part 3: the unsexy list
Identity, network access, default credentials, attestation, and audit logs: the unsexy DevSecOps controls that close most of the gap Parts 1 and 2 left…
Apr 12, 2026 · 10 min read
Lazy SRE's guide to secure systems, part 2: the actions you didn't pin
Hardening GitHub Actions for small teams: SHA pinning against tag rewrites, OIDC over long-lived secrets, dependency cooldowns, and the trigger to never…
Apr 5, 2026 · 9 min read
Lazy SRE's guide to secure systems, part 1: the dependencies you didn't read
Startup-grade defense against npm supply-chain attacks, for Future You at 3am. Chainjacking, postinstall scripts, smallest install, most leverage.