Tech blog for software developershttps://influentcoder.com/https://influentcoder.com/posts/aws-iam/https://influentcoder.com/posts/aws-iam/I struggled to understand what I had access to in AWS, or which service could access what, when IAM wasn't managed by us. So I went back to the first principles of IAM policies.Sun, 08 Jun 2025 00:00:00 GMThttps://influentcoder.com/posts/backwards-comp/https://influentcoder.com/posts/backwards-comp/Building platforms, APIs and shared libraries isn't just about clean code. It's about not breaking people. Stories of what we broke without meaning to.Sun, 27 Apr 2025 00:00:00 GMThttps://influentcoder.com/posts/communicate/https://influentcoder.com/posts/communicate/When we make changes to a core platform component, running hundreds of millions of times a day, there's another responsibility that's just as important: communication.Sun, 20 Apr 2025 00:00:00 GMThttps://influentcoder.com/posts/envoy/https://influentcoder.com/posts/envoy/Envoy configuration is tough to set up when some services use mTLS with short-lived SPIFFE certificates, some only speak HTTP/1, and some need custom auth.Sun, 01 Jun 2025 00:00:00 GMThttps://influentcoder.com/posts/fuse/https://influentcoder.com/posts/fuse/When I first encountered FUSE, I didn't immediately realize how useful it could be. Then a colleague casually suggested: "You could mount it with FUSE."Sun, 13 Apr 2025 00:00:00 GMThttps://influentcoder.com/posts/jq/https://influentcoder.com/posts/jq/The jq filters I use the most at work to query and debug JSON APIs from the terminal, and that I keep forgetting the syntax for.Sun, 25 May 2025 00:00:00 GMThttps://influentcoder.com/posts/linux-mount/https://influentcoder.com/posts/linux-mount/Isolating workloads without containers, and making containers start fast, got me digging into mount namespaces and propagation. Here is what I learned, with experiments to run.Sun, 04 May 2025 00:00:00 GMThttps://influentcoder.com/posts/nvim-diagnostics/https://influentcoder.com/posts/nvim-diagnostics/At some point, error and warning messages stopped appearing inline in Neovim. After some investigation, the cause was a disabled option: virtual_text.Sun, 06 Apr 2025 00:00:00 GMThttps://influentcoder.com/posts/opath/https://influentcoder.com/posts/opath/How to walk a directory tree that someone else controls without ending up in /etc: what O_PATH file descriptors and openat2() do, with a race you can reproduce.Sun, 11 May 2025 00:00:00 GMThttps://influentcoder.com/posts/overlayfs/https://influentcoder.com/posts/overlayfs/I looked into overlayfs while working on fast container startup. How copy-up, whiteouts and layers work, the gotchas, and what I found about eStargz, Nydus and fuse-overlayfs.Sun, 18 May 2025 00:00:00 GMThttps://influentcoder.com/posts/reinstall-grub-arch-linux/https://influentcoder.com/posts/reinstall-grub-arch-linux/A BIOS update from Windows messed up GRUB on my Arch Linux dual-boot laptop. Here's how I got it working again.Tue, 19 Dec 2023 00:00:00 GMThttps://influentcoder.com/posts/walkthrough-setup-kerberos-linux/https://influentcoder.com/posts/walkthrough-setup-kerberos-linux/A walkthrough to set up Kerberos on Linux, and authenticate on a server via SSH using Kerberos, with three Ubuntu hosts.Sun, 12 Nov 2023 00:00:00 GMT