Container-Optimized Operating Systems: What Makes Them Different
Read-only /usr, atomic A/B updates, and boot-time configuration: how container-optimized operating systems differ from a conventional distro with Docker.
Linux7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
499 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Container Health and Self-Healing Beyond Docker Healthchecks
Go past a single healthcheck: layered probes, readiness vs liveness, and systemd watchdogs for containers that repair themselves.
Containers & Orchestration8 min read
Repo Ops: The .github Directory for Org-Wide Settings
The .github directory is repo policy as code — issue forms, workflows, owners files, and community defaults — and org-level repos inherit it everywhere.
GitHub6 min read
Caching in CI: Fast Pipelines Without Cheating
Cache dependencies and build outputs with correct keys so every run is fast and never silently stale.
CI/CD7 min read
Disk and CPU Watchdog Agent with Allowlists
Watch disk and CPU on a VPS and let the agent run only allowlisted fixes such as journal vacuum or nginx reload, logging every action it takes.
AI Agents8 min read
Observe Tokens, Latency, and OOM on CPU Inference
Log tokens, encode_ms, generate_ms, and RSS on every CPU inference request so you see saturation and OOM risk before the OOM killer ever fires.
AI Infrastructure9 min read
Automating Security Updates with unattended-upgrades
Deploy unattended-upgrades on Debian or dnf-automatic on Rocky so security patches install themselves without breaking your running services.
Linux Security6 min read
Immutable Distros: Fedora Silverblue and openSUSE MicroOS
Read-only roots, atomic updates, and containerized apps: how Silverblue and MicroOS change patching, deployment, and what a VPS admin must unlearn.
Linux7 min read
A Pragmatic Pipeline Template Teams Can Copy
Steal this practical CI/CD pipeline template: lint, test, build, scan, and deploy in workflows your team can copy and adapt today.
CI/CD8 min read
Testing Infrastructure Code: Linting, Validation, and Dry-Runs
Guard infrastructure changes with four gates: lint the code, validate syntax, dry-run against real state, and gate applies on the result.
API & Automation8 min read
Backing Up a Small Cluster: etcd and Manifest Backups
Protect a small Kubernetes cluster with etcd snapshots plus manifest exports, and restore them on a fresh k3s install.
Kubernetes7 min read
Cost-Aware Architecture on INR Pay-as-You-Go
Treat each VPS as a line item in INR: right-size roles, delay splits until SLOs demand them, and turn idle nodes off instead of overbuying reserved capacity.
Cloud Architecture8 min read