Using Falco to Monitor Runtime Security
· β˜• 5 min read
1. What Falco Is Falco is a cloud-native runtime security project contributed to the CNCF by Sysdig. Falco implements an extensible event rule filtering engine. Through a series of operations β€” capturing events, matching security rules, and producing alert notifications β€” it can surface security problems in a system. The events come from system calls, and it also supports an ebpf probe; the rules are open source [1] and you can define your own extensions [2].

How to Run Stable Diffusion on macOS Without a GPU
· β˜• 2 min read
1. Recommended Configuration for Running Stable Diffusion Memory: at least 16 GB DDR4 or DDR5 Storage: at least 10 GB of free space GPU: an NVIDIA card with at least 6 GB of VRAM If your hardware falls short, you can also use one of the various optimized forks that support lower-spec hardware, but generation time will increase.

Using In-Cluster Prometheus to Collect Etcd Metrics
· β˜• 2 min read
1. Skipping Certificate Verification Prevents Scraping If you can skip TLS authentication when scraping metrics, that is the easiest path. The Prometheus ConfigMap configuration looks like this: 1 2 3 4 5 6 7 8 9 - job_name: etcd metrics_path: /metrics scheme: https tls_config: insecure_skip_verify: true static_configs: - targets: ["1.1.1.1:2379"] - targets: ["2.

How to Add Basic Authentication to a Kubernetes Service
· β˜• 2 min read
1. Deploy the Ingress Controller Check the Kubernetes version 1 2 3 4 kubectl version --short Client Version: v1.21.4 Server Version: v1.21.4 Find a compatible Nginx Ingress version Helm Chart version Highest available Helm Chart version Compatible K8s version 3.x.x 3.36.0 1.16+ 4.x.x 4.4.2 1.19+ Reference: https://github.com/kubernetes/ingress-nginx Install the Nginx Ingress Controller 1 2 3 helm upgrade --install ingress-nginx ingress-nginx \ --repo https://kubernetes.

Troubleshooting Slow IO When Building Images
· β˜• 10 min read
1. The Problem Project details: File size 5.6 GB File count 529352 Dockerfile 1 2 3 FROM golang:1.13 COPY ./ /go/src/code The build command and its output are as follows: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 time DOCKER_BUILDKIT=1 docker build --no-cache -t test:v3 -f Dockerfile .