MaruOps · Infrastructure and AI notes
Linux, Kubernetes
and local AI.
Linux, networking, Kubernetes and local LLMs.
Configuration choices and troubleshooting, explained step by step.
Series guides
Kubernetes Lab
Prepare three VMs, build a cluster, then work through deployment, networking and recovery.
Local LLM
Run a first model, then explore APIs, document retrieval, tools and operations.
Git and GitOps
Follow repositories and commits through CI, deployment and GitOps recovery.
Latest articles
Browse the topics to find the guide you need.
-
Headlamp’s Kueue Plugin: Check Admission Before Investigating Pending Pods
A Kubernetes project article demonstrates Headlamp-based Kueue diagnostics. Separate queue admission from Pod scheduling and understand the alpha plugin’s read-only scope.
-
Kubernetes cgroup v2 Migration: Avoid a kubelet Startup Failure After Upgrade
The Kubernetes project reviewed cgroup v1 deprecation and v2 migration. Check the default behavior from 1.35 and inventory individual nodes before upgrading.
-
Ubuntu 26.10 Arrives: Review Automation After the Rust coreutils Transition
Ubuntu 26.10 brings Rust-based coreutils and security changes in an interim release. Separate evaluation from LTS operations and test scripts against their actual expected behavior.
-
AWS Continuum Reaches GA: From Vulnerability Findings to Reviewable Fixes
AWS announced GA for Continuum’s code-vulnerability validation and remediation proposals. Review collection permissions, evidence, and the human approval path before adoption.
-
GitHub Public Monitoring Expands: Closing an Alert Does Not Revoke a Token
GitHub added validity checks, alert history, REST APIs, and webhooks to public monitoring. Keep alert management separate from credential revocation and service recovery.
-
Ubuntu 26.10 curl Security Update: Include libcurl Consumers in the Review
Ubuntu published USN-8927-2 for curl on 26.10. Check package builds, bundled libraries, dependent applications, and container images rather than the command alone.
-
Eight eMudhra Intermediate Certificates: Check Trust Stores Beyond the Browser
Cloudflare disclosed a key compromise affecting eight eMudhra intermediate certificates. Review trust updates in operating systems, containers, applications, and long-running processes.
-
Cloudflare WAF Adds Request-and-Response Inspection: Blocking Is Not Rollback
Cloudflare announced full-transaction detection and response rules. Understand what blocking a response can prevent and what may already have happened at the origin.
-
Cloudflare PQ GeoKey Manager Enters Closed Beta: Keys Are One Location Boundary
Cloudflare announced a closed beta for PQ GeoKey Manager. Distinguish geographic key-use restrictions from traffic routing, plaintext processing, and logging locations.
About these notes
Configuration
and troubleshooting.
From first configuration to operational issues.
Find what to inspect, why it matters, and how to proceed.