Touch ID умеет больше, чем вы думали
Лично у меня пароль на sudo был отключён, SSH-ключи были незашифрованы, а секреты для переменных окружения хранились открытым текстом в ~/.zshrc , п…
DevOps
⚑ Report a ProblemLatest DevOps news from Tech News
All topics
agents
ai
api
architecture
automation
aws
backend
beginners
cloud
database
devchallenge
devops
docker
javascript
kubernetes
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
Building a Distributed GPU Cluster for LLM Inference on Idle Apple Silicon Macs
A single M2 Max Mac Studio can serve 8‑token‑per‑second Llama‑2‑7B inference, yet most developers leave that compute idle overnight. ## Inventory an…
Godot Movie Maker and screenshots on macOS without --headless
I wanted Godot to write screenshots and short videos from a script on my Mac, the way it does in CI on Linux. Godot 4.7.1 on macOS 26.5.2 can't do i…
I run Claude Code with permission prompts off, so I put it in a VM
I use Claude Code every day, and I run it with permission prompts off. It's much faster that way. You give it a task, go do something else, and come…
Azure Pipelines' GitHub-hosted agents go GA, and your pool label now spends money
Picture a pull request that changes one line of azure-pipelines.yml . The build logic is untouched; only the vmImage value moves from a stock label…
RKE2/K3s on macOS + Apple Containers
This project covers both RKE2 and K3s on macOS with Apple's container project as the runtime for each of the processes. rke2-silicon runs a single K…
Ubuntu Cloud Images on a Mac: Why the Disk Is 3.5 GB, Why You Can't Log In, and How to Fix Both
Ubuntu's cloud images are the quickest way to a Linux VM I know. There's no installer to click through, the download is under 1 GB, and they boot in…
Run a Local GUI Agent on Your Mac in 10 Minutes with Mano-P and Cider
What This Guide Covers Mano-P is an open-source GUI agent that sees your screen, reasons about what to do next, and executes real macOS actions: cli…
fs.cpSync copied the framework and left every symlink pointing at the cache
Notifio is a desktop app that watches rental search pages and tells you the moment something new appears. It drives a Playwright-managed Chromium in…
Six things about WKWebView the docs don't tell you
I have spent the last few months building a browser on WKWebView. Not a wrapper around a single web view — a real one, with tabs, separate cookie ja…
Wi-Fi Was Dead for 5 Hours While Chrome Kept Working: 4,960 DNS Failures and the 5-Minute Probe That Catches Them
Last time I wrote about how many jobs you should re-run the moment your quota comes back . This post goes back a few days earlier, to a quieter and…
SSH Tunnel Manager in Rust: CLI vs Native GUI Trade-offs
🔧 The Problem A few weeks ago a Swift-based macOS SSH tunnel manager started making the rounds here — a menu bar app that lets you spin up local/rem…
4 Ways a 'Retired' launchd Job Kept Running on a 160+ Job Fleet — and the 3 Commands That Actually Stop It
I run more than 160 launchd jobs on a Mac that almost never reboots. That fleet is what carried me from a ¥100k/month student side gig to ¥600k jugg…
Putting Apple's Virtualization framework under a Flutter app
I maintain WSL Manager , a Flutter desktop app from 2021 that saves you from typing wsl.exe flags. Version 2 runs the same app on Apple silicon, whe…
Zero-Tax Virtualization: Running AI Agents Safely in Velo Workspaces
1. Introduction: The Security vs. Performance Dilemma Running autonomous AI coding agents natively on your primary macOS machine introduces severe s…
Brewwery a native macOS GUI for Homebrew
Homebrew is usually one of the first tools I install on a new Mac. Its command-line interface is fast, reliable, and familiar. But over time, a Home…
UsageNow Tracks OpenAI Codex, Claude Code, Gemini and Antigravity Usage from Your Mac Menu Bar
I rarely use just one AI coding tool anymore. Codex may be working on one task, Claude Code on another, Gemini CLI is useful for a different workflo…
A Scheduled Job That Works and Never Runs
I have a job that publishes one article a day. Over four days I rebuilt its scheduling three times, and each rebuild fixed a real failure that the p…
Two translation layers and a TPM you have to fake: Windows on Apple Silicon
Disclosure up front: I build Kyvenza , a paid VM manager for Apple Silicon. This post is about the platform constraints, not a pitch — I'll be speci…
Never Name a zsh Loop Variable path: Three Deploy-Verification Traps That Looked Like Outages
In one day of post-deploy verification I hit three failures that all looked like "production is broken" and none of which were: zsh's tied path arra…
Build in the VM, Think on the Mac GPU: Debian 13 on Apple container With a Local Gemma 4
This article walks through building a Debian 13 machine under Apple's container CLI on an Apple silicon Mac, and then wiring that machine to a local…
Full Disk Access Was On, and macOS Still Refused the App
A Mac app I maintain needs Full Disk Access. It measures disk usage, and most of what is worth measuring sits behind that permission. I switched it…
Shipping a paid Mac app outside the App Store in two days
On Wednesday Apple showed the iPhone Duo and its status ring: battery, Wi-Fi and volume folded into one small ring. I wanted it on my Mac. By Friday…
47GB of Compressed Memory and No Permission to Kill It: Handing a Monitoring Script Exactly One Root Command
Last time I wrote about picking out and reaping only the "orphaned Chrome" processes . This time it's the monitoring script sitting right next to it…
Your .env file is a liability you've just gotten used to
Every project I open has one. A .env file sitting in a folder, holding a database password, a Stripe key, maybe an AWS secret — in plain text, on di…
An Architecture to Run AI Agents Safely and Efficiently in a Linux VM on Apple Silicon
I'm the developer of Velo Workspaces , a native macOS app for disposable Linux and macOS VMs on Apple Silicon. This post is about a specific problem…
A Squarified Treemap by Hand, Because Charting Packages Cannot Drill Down
Helm's storage tool shows your disk as a treemap: every folder a rectangle, every rectangle sized by how much space it takes. Click one and you are…
The DNS Field That Could Run Anything as Root
Sonar has a Control tab. One of the things it does is switch the DNS resolver for your Mac — tap Cloudflare, tap Quad9, or paste in the address of y…
5 Weird Bugs I Hit Capturing System Audio Cross-Platform (Rust + Tauri)
Full disclosure up front: I'm building SyntaxCue , a desktop app that listens to a live call and helps you think through the answer in real time. No…
24 Hours of Zero Posts: The 46GB Compressed-Memory Bomb That RSS Couldn't See
The day my social media automation posted exactly zero times in 24 hours was the day I stopped trusting Activity Monitor. RSS said 264MB. Reality wa…