Ryan Munz

Ryan Munz

@ryanmunz.com

Senior Solutions Architect & DevOps Engineer, CISSP I build things and then nerd out over infrastructure minutia only I care about!

249 followers207 following268 posts

Pinned

Ryan Munz reposted

Replying to @alexrochonva.bsky.social

The underlying idea of Leeroy at the end is to keep holding on, no matter how bad it gets, and to let others in to help you. You never know what’s on the horizon and you CAN make changes to make your life better, so don’t give into despair.

I had no idea how much I needed this Open Policy Agent rego in my life until it stopped me from throwing random things in the default namespace like 6 times in a day.

Tinkering with Nexus, it's annoying that it doesn't expose publish dates. So uv pip's "exclude-newer" can't function. Means it's an either/or choice instead of progression (you either use uv pip's config OR you pay for Sonatype IQ out the gate).

copy.fail Funny thing about copy/fail. The *default* kernel in al2023 (Amazon Linux) is based on 6.1 and is not susceptible to this (tested the poc in a virtual machine). However most "optimized" images (like the EKS ones) are using kernel6.12 which is. I believe there's a kernel6.15 as well.

copy.failCopy Fail — 732 Bytes to RootCVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

Also the non-rc versions of 7.x have mitigations in place (so Ubuntu 26.04, CachyOS, and very up to date Proxmox). Until they have the kernel patch ready, Ubuntu 24.04 has been mitigating with a kmod patch (I took their modprobe approach and applied it to my proxmox since I'm paranoid).

Ryan Munz reposted

The #InternetArchive microfiche digitization #livestream is now at a new address. Tune in at the link below & enjoy real-time preservation work with mellow lo-fi vibes in the background. 📡 www.youtube.com/live/SxUjwZY... #DigitalPreservation #LiveNow

youtube.comlofi Archive radio 🎞️ beats to scan/read microfiche toOff Hours? Watch a 2hr stream at https://www.youtube.com/watch?v=gibUecoF1bEEver wonder how government documents, locked away on tiny sheets of microfiche, b...

github.com/ryanmunz/ter... I had a reason to play with an SSH bounce box in Spain along with Spot Instances. The part I don't mention is that you can do this to get a socks5 proxy on localhost (once you setup DNS to forward correctly). ssh -D 8080 ec2-user@spot-bastion.env.local

github.comGitHub - ryanmunz/terraform-spot-bastion: This project uses Terraform to deploy a bastion host using AWS Spot pricing discoverable via DNS.This project uses Terraform to deploy a bastion host using AWS Spot pricing discoverable via DNS. - ryanmunz/terraform-spot-bastion

I'm not dead. Working on some non-tech projects and had a health *thing* I've got some proxmox terraform stuff in the cooker and an integration I want to rework using cloudflare workers. Still enjoying being married!

Oh... you can do this... curl --upload-file /path/to/file.ext -u 'DOMAIN\Username' smb://172.16.17.52/ShareName/ Curl be wild'n sometimes.

...it's going to be amusing if I end up writing about my adventure installing Ubuntu 22.04 on my Android just to make it run Doom. Also learning some interesting Android stuff. Graylog <= syslog/k3s/cloudwatch logs once I finish writing it up.

I don't remember why I have a folder that is just Emerald Tree Boas but it does not require any justification to live on my laptop forever.

The funny thing about fine china and tea service: while people decades ago bought these hilariously overpriced sets, let them gather dust in a cabinet and now can't give them away... they're lovely if you *actually use them* I live out of a tea tray. Easy way to keep track of my coffee, phone, etc

Ryan Munz reposted

If you're trying to upgrade to Windows 11 24h2 and you keep getting an error saying that your PC has a driver or service preventing the upgrade. It is EasyAntiCheat 99% of the time! Would be nice if Setup just told me that instead making me slog through XML files. 🤦‍♂️ #TechTip

Ryan Munz reposted

What are the most exciting/useful dev things you’ve discovered in 2024? Could be devtools, libraries, new language features, educational resources, whatever 😄

Using toml over yaml, json or even a boring list of var = values is starting become an indicator of "your software is high maintenance"

In case you were wondering, installing kubernetes using the official documentation in 2024 is still atrocious. Use k3s and save yourself hours of annoyance. The only reason I'm even looking at kubeadm is for the CKA

mkdir /etc/containerd containerd config default > /etc/containerd/config.toml Edit SystemdCgroup to true and sandbox_image to whatever kubeadm wants.

I just saved you a lot of tedium. The SystemdCgroup change is in the documentation but no one ships with a fleshed out containerd config.toml and the control plane containers will fall over constantly if it's not *exactly* what kubelet wants. I guess I have to write a thing about this. What a slog.

I don't want to brag, but I did spend like 2 hours building a gitea workflow that does literally nothing except make dummy commits to a private github repo to make my heatmap pretty. I run my own infrastructure but people look at github! Don't judge me! 😁