Building the last WAL on S3
Nearly two years ago, we started Archil with a simple realization: it was clear that people were spending immense effort to build new, serve...
Topic
#infrastructure
10 篇笔记
Kyverno is a platform primitive, not a security tool
Where does Kyverno live in your organization? I don’t mean which cluster! On which team’s slide deck does it show up? Whose budget line? For most companies I’ve…
Git at any scale
Cursor is the best AI coding agent., Git at any scale
Launching a million sandboxes per second in constant time
They say that in the future, everyone will have their own sandbox company for 15 minutes. Let's make that simpler, here's exactly how I buil...
Advanced Observability for Production Systems
From SLIs to LLM monitoring: 9 practices that separate mature teams from dashboard collectorsMost teams have dashboards. Few have observabil...
Building cloud agent infrastructure: what's different, and what we learned
Most agent frameworks today assume a desktop. One user, one machine, one process. The agent runs while the laptop is open, writes to a local...
一、整体架构
这次问题的核心现象是： 最终定位： OpenEBS 后端已经扩容成功，但 Linux device-mapper（multipath）层没有刷新容量，导致文件系统仍看到旧大小。 二、问题现象 PVC describe 看到： 但 events 中持续出现： 以及： 同时又有： 这是一个非常“矛盾”的状态。 --- 三、第一次误判 最开始以为： 因为： - external-resizer 持续 r…
Kubernetes 中 Alpine(musl) DNS 解析异常排查复盘
Open: Pasted image 20260513104709.png30-Resources/Clippings/2026/2026-05/assets/03a146e5af0e9e40f7dbae15116436eaMD5.jpg Kubernetes 中 Alpine(musl) DNS 解析异常排查复盘 问题现象 某个 Kubernetes Pod 中： 报错： 但： 能够正常解析：…
容器沙盒方案深度对比
容器沙盒方案深度对比 定位概览：以下 7 个项目都围绕"为 AI Agent / 不可信代码提供安全隔离的执行环境"这一核心需求，但技术路线、成熟度、适用场景差异极大。 ---|--------|------|---------|---------|----------| | #OpenSandbox | 阿里巴巴 | Python / Go / 多语言 SDK | 10.4k | Apache…
Building and operating a pretty big storage system called S3
Three distinct perspectives on scale that come along with building and operating a storage system the size of S3.