The return of the tilde
As some of you may have noticed my web page is now under /~mc instead
of just /mc. This is a return to olden times.
The Apache web server, and probably many other web servers, had a
simple way of adding personal web pages for local users. This meant
that an URL ending with ~mc led directly to a subdirectory of user
mc’s home directory. Whatever they put in that directory was
immediately available on the Intertubes! Neat, huh?
We need to bring this back to the modern net! Many tilde pubnixe … ⌘ Read more
Computers in school
IntroductionA version of this post was initially published on 2022-05-23
(Pungenday, the 70 day of Discord in the YOLD 3188) in my gemlog at:
gemini://gem.hack.org/log/computers-in-school.gmi
The text has been edited after speaking with some old school mates and
trying to remember more. I also added a few photos.
When I started upper secondary school as a sixteen year-old in 1988 my
school had what I think were IBM PC/XT computers, one classroom of
16(?) computers with co … ⌘ Read more
Yesterday, before our second (and last) move today, I took the opportunity to take a relaxing ride on my bike along my running route from some years ago and enjoy the nature. ⌘ Read more
On my blog: Free Culture Book Club — Pilogy, part 1 https://john.colagioia.net/blog/2025/04/26/pilogy-1.html #freeculture #bookclub
On my blog: Toots 🦣 from 04/21 to 04/25 https://john.colagioia.net/blog/2025/04/25/week.html #linkdump #socialmedia #quotes #week
How to build and deliver an MCP server for production
In December of 2024, we published a blog with Anthropic about their totally new spec (back then) to run tools with AI agents: the Model Context Protocol, or MCP. Since then, we’ve seen an explosion in developer appetite to build, share, and run their tools with Agentic AI – all using MCP. We’ve seen new […] ⌘ Read more
How the GitHub CLI can now enable triangular workflows
The GitHub CLI now supports common Git configurations for triangular workflows. Learn more about triangular workflows, how they work, and how to configure them for your Git workflows. Then, see how you can leverage these using the GitHub CLI.
The post How the GitHub CLI can now enable triangular workflows appeared first on [The … ⌘ Read more
Fluent Bit v4.0: Celebrating new features and 10th anniversary
The Fluent Bit maintainers have exciting news to share! Fluent Bit version 4 is out and just in time to celebrate the project’s 10-year anniversary. The journey: From embedded logging to multi-Signal observability With over 15… ⌘ Read more
Building trust with OpenID Federation trust chain on Keycloak
OpenID Federation 1.0 provides a framework to build trust between a Relying Party and an OpenID Provider that have no direct relationship so that the Relying Party can send OIDC/OAuth requests to the OpenID Provider without being previously… ⌘ Read more
LitmusChaos at KubeCon + CloudNativeCon Europe 2025: A Recap
The cloud native community recently converged in London from April 1 – 4, 2025, for an incredible edition of KubeCon + CloudNativeCon Europe. From our perspective at LitmusChaos, it was a week filled with inspiring sessions,… ⌘ Read more
On my blog: Real Life in Star Trek, Rightful Heir https://john.colagioia.net/blog/2025/04/24/rightful-heir.html #scifi #startrek #closereading
A guide to deciding what AI model to use in GitHub Copilot
What to look for with each model and how to test them in your workflows—with tips, tricks, and pointers.
The post A guide to deciding what AI model to use in GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
Prepare your application landscape for zero trust with Keycloak 26.2
Strong identity and access management is a key component of a zero trust architecture for cloud native applications. Keycloak is well-known for its single-sign-on capabilities based on open standards. It provides you all the building blocks… ⌘ Read more
Erlang Solutions: Reduce, Reuse… Refactor: Clearer Elixir with the Enum Module
“When an operation cannot be expressed by any of the functions in the Enum module, developers will most likely resort to reduce/3.”
From the docs for Enum.reduce/3
In many Elixir applications, I find
Enum.reduceis used frequently.Enum.reducecan do anything, but that doesn’t mean it should. In many cases, otherEnumfunctions are more readable, practically as fast, and easier … ⌘ Read more
Protecting NATS and the integrity of open source: CNCF’s commitment to the community
When a company contributes a project to the Cloud Native Computing Foundation (CNCF), it’s not just sharing code—it’s making a commitment to the open source community. It’s a pledge to uphold open collaboration, shared community ownership,… ⌘ Read more
I have created an Open Source BLOG of small snipets for vim. ⌘ Read more
.(s) / dot(s) like @eapl.me are valid? 🤔 Or nicks even? 🤔
on timeline the mention looks OK. Is there an issue on Yarn?
It’s an interesting topic. For example on Bsky it’s natural to allow domains https://bsky.social/about/blog/4-28-2023-domain-handle-tutorial
Although TwiXter only allows (letters A-Z, numbers 0-9 and of underscores)
https://help.x.com/en/managing-your-account/x-username-rules
From prompt to production: Building a landing page with Copilot agent mode
See how I built a developer-focused landing page in under 30 minutes using GitHub Copilot agent mode and Claude 3.5 Sonnet—with just screenshots and prompts.
The post From prompt to production: Building a landing page with Copilot agent mode appeared fir … ⌘ Read more
OSTIF Announces NATS Security Audit Results
OSTIF is proud to share the results of our security audit of NATS. NATS is an open source project made by Synadia Communications for secure always-on messaging for a variety of digital formats and clients. With… ⌘ Read more
Istio publishes results of ztunnel security audit
Passes with flying colors Istio’s ambient mode splits the service mesh into two distinct layers: Layer 7 processing (the “waypoint proxy”), which remains powered by the traditional Envoy proxy; and a secure overlay (the “zero-trust tunnel”… ⌘ Read more
Building AuthZed with the power of cloud native: A CNCF success story
At the Cloud Native Computing Foundation (CNCF), we celebrate organizations that turn cloud native technologies into real-world impact. AuthZed, a CNCF Silver member, is one such story—a company built from the ground up on open source,… ⌘ Read more
Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint
Discover practical tips and tricks for forming effective GraphQL queries and mutations.
The post Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint appeared first on The GitHub Blog. ⌘ Read more
KitchenOwl
Until recently, my fiancée and I used Bring! to manage a list of groceries, we need to buy. Recipes we saved in a Telegram channel, pinning those we want to do in the following days. ⌘ Read more
Dockerizing MCP – Bringing Discovery, Simplicity, and Trust to the Ecosystem
Discover the Docker MCP Catalog and Toolkit, a new way to source, use, and scale with MCP tools. ⌘ Read more
These Kubernetes mistakes will make you an easy target for hackers
Kubernetes is exceedingly powerful for orchestrating containerized applications at scale. But without proper monitoring and observability—especially in self-managed infrastructure—it can quickly become a security disaster waiting to happen. This is not due to inherent flaws in… ⌘ Read more
Copilot taking over?
I tried GitHub Copilot (Free) in Visual Studio Code again for some small GoBlog changes. Copilot can now generate tests (although it doesn’t feel intelligent, as you need to correct quite a few things), it can do code reviews before committing and it can generate commit messages. Of course, it can also do code completions and write complete code, if you want it to do so. ⌘ Read more
Racing into 2025 with new GitHub Innovation Graph data
Discover the latest trends and insights on public software development activity on GitHub with the quarterly release of data for the Innovation Graph, updated through December 2024.
The post Racing into 2025 with new GitHub Innovation Graph data appeared first on [The GitHub Blog](ht … ⌘ Read more
How to take climate action with your code
There are 60,000+ climate-focused projects on GitHub, explore one this Earth Day!
The post How to take climate action with your code appeared first on The GitHub Blog. ⌘ Read more
Deep Dive into the Gateway API Inference Extension
Running AI inference workloads on Kubernetes has some unique characteristics and challenges, and the Gateway API Inference Extension project aims to solve some of those challenges. I recently wrote about these new capabilities in the kgateway… ⌘ Read more
Regex Isn’t Hard - Tim Kellogg 👈 this is a pretty good conscience article on regexes, and I agree, regex isn’t that hard™ – However I think I can make the TL;DR even shorter 😅
Regex core subset (portable across languages):
Character sets
• a matches “a”
• [a-z] any lowercase
• [a-zA-Z0-9] alphanumeric
• [^ab] any char but a or b
Repetition (applies to the preceding atom)
• ? zero or one
• * zero or more
• + one or more
Groups
• (ab)+ matches “ab”, “abab”, …
• Capture for extract/substitute via $1 or \1
Operators
• foo|bar = foo or bar
• ^ start anchor
• $ end anchor
Ignore non‑portable shortcuts: \w, ., {n}, *?, lookarounds.
On my blog: Developer Diary, Grounation Day https://john.colagioia.net/blog/2025/04/21/grounation.html #programming #project #devjournal
yarnd UI/UX experience (for those that use it) and as "client" features (not spec changes). The two ideas are quite simple:
All these remind me of the “blog” ability once existed in Yarnd. I hate to be the party pooper, but little to non interest from me. LOL. I am up to increase the length of a twtxt, though. It is rather limiting right now.
@prologic@twtxt.net Since you have to check and double check everything it spits out (without providing sources), I don’t find any of this helpful. It’s like someone’s in the room with you and that person is saying random stuff that might or might not be correct. At best, it might spark some new idea in your head and then you follow that idea the traditional way.
Information published on the internet (or anywhere, for that matter) was never guaranteed to be correct. But at least you had a “frame of reference”: “Ah, I read this information about Linux on a blog that usually posts about Windows, so this one single Linux post might not necessarily be correct.” That is completely lost with LLMs. It’s literally all mushed together. 🤷
On my blog: Free Culture Book Club — Secrets in the Static https://john.colagioia.net/blog/2025/04/19/secrets-static.html #freeculture #bookclub
On my blog: Toots 🦣 from 04/14 to 04/18 https://john.colagioia.net/blog/2025/04/18/week.html #linkdump #socialmedia #quotes #week
How to make your images in Markdown on GitHub adjust for dark mode and light mode
When you want your images to look good in Markdown on GitHub, you might have to adjust for the UI around them.
The post How to make your images in Markdown on GitHub adjust for dark mode and light mode appeared first on [The GitHub B … ⌘ Read more
Cracking the code: How to wow the acceptance committee at your next tech event
Want to speak at a tech conference? These four practical tips will help your session proposal stand out—and land you on the stage.
The post Cracking the code: How to wow the acceptance committee at your next tech event appeared fi … ⌘ Read more
Creating a ClickHouse Cluster on Raspberry Pis
Want a hands-on way to explore Kubernetes and ClickHouse®—without spinning up cloud VMs? In this post, we’ll build a home-lab cluster of Raspberry Pi 5 boards that mimics a high-availability setup. Whether you’re a cloud-native developer… ⌘ Read more
On my blog: Real Life in Star Trek, Suspicions https://john.colagioia.net/blog/2025/04/17/suspicions.html #scifi #startrek #closereading
Which AI model should I use with GitHub Copilot?
Ever wondered which AI model is the best fit for your GitHub Copilot project? Here are some things to consider.
The post Which AI model should I use with GitHub Copilot? appeared first on The GitHub Blog. ⌘ Read more
Ubuntu 25.04 released
Version\
25.04 (“Plucky Puffin”) of the Ubuntu Linux distribution has been
released. This release includes Linux 6.14, GNOME 48, APT 3.0, and introduces a
Arm64\
desktop ISO to install Ubuntu Desktop on Arm64 systems. This is an
interim release, with support through January 2026. See the [release\
notes](h … ⌘ Read more
Tor Browser 14.5 released
Version\
14.5 of the Tor\
Browser has been released. Notable features in this release
include the addition of Connection Assist for the Android version of
the Tor Browser, and language support for Belarusian, Bulgarian, and
Portuguese for all versions of the browser.
Should Tor Browser fail to establish a direct connection to the Tor
network, Connection Assist will offer to find and try bridges for
y … ⌘ Read more
Erlang Solutions: Erlang Solutions’ Blog round-up
The tech world doesn’t slow down, and neither do we. From the power of big data in healthcare to keeping you up-to-date about fintech compliance, our latest blog posts explore the important topics shaping today’s digital world.
Whether you’re leading a business, building software, or just curious about the future of tech, check out what the Erlang Solutions team has been talking about.
Understanding Big Data in Healthcare provides technical leadership to the cloud native community. Strong TOC participation at this year’s KubeCon + CloudNativeCon Europe in London enabled in-person discussions and strategic planning for CNCF project technical priorities… ⌘ Read more
ProcessOne: ejabberd 25.04
Just a few weeks after previous release, ejabberd 25.04 is published with an important security fix, several bug fixes and a new API command.
Release Highlights:
If you are upgrading from a previous version, there are no change … ⌘ Read more
Docker Desktop for Mac: QEMU Virtualization Option to be Deprecated in 90 Days
We are announcing the upcoming deprecation of QEMU as a virtualization option for Docker Desktop on Apple Silicon Macs. After serving as our legacy virtualization solution during the early transition to Apple Silicon, QEMU will be fully deprecated 90 days from today, on July 14, 2025. This deprecation does not affect QEMU’s role in emulating […] ⌘ Read more
When to choose GitHub-Hosted runners or self-hosted runners with GitHub Actions
Comparing GitHub-hosted vs self-hosted runners for your CI/CD workflows? This deep dive explores important factors to consider when making this critical infrastructure decision for your development team.
The post [When to choose GitHub-Hosted runners or self-hosted runners with GitHub Actions](https://github.blog/enterprise-software/ci-cd/when-to-choose-github-ho … ⌘ Read more
European AI
To reduce my dependence on USA-based products, I switched from using the OpenAI API to Scaleway’s Generative API for my blog. Not only is it cheaper, but it’s based on open-source models, hosted in Europe. 🇪🇺 ⌘ Read more
Kagent: Bringing Agentic AI to Cloud Native
Solving Cloud Native Operation Challenges with AI Agents Oh no! Your application is unreachable, buried under multiple connection hops—how do you pinpoint the broken link? How do you generate an alert or bug report from Prometheus… ⌘ Read more
ProcessOne: Hello from the other side: Matrix ↔ XMPP via ejabberd 25.03
With ejabberd 25.03, the Matrix gateway ( mod_matrix_gw) no … ⌘ Read more
New bike season
Yesterday, I started my new bike season and took my bike for a fun ride of about 25 km. I rode the first part of the “Städtepartnerschaftsradweg Braunschweig - Magdeburg” (City partnership cycle path Braunschweig - Magdeburg) between my hometown and a village called Königslutter. The weather was perfect and I truly enjoyed it. For the way back, I took the train that I reached just in time. ⌘ Read more
What LLMs Can Do for SREs in Cloud Native Infrastructure
Cloud native infrastructure continues to scale, and with it, so does operational overhead. Kubernetes has become the backbone of modern platforms, but as cluster sizes grow past 100 nodes and thousands of workloads, the operational load… ⌘ Read more
Five Critical Shifts for Cloud Native at a Crossroads
As enterprises run ever-more-complex workloads on Kubernetes, they’re facing a new set of challenges: how to ensure security requirements are met, budgets are deployed efficiently and operational complexity is, well, not as complex. Many are finding… ⌘ Read more
GitHub for Beginners: Security best practices with GitHub Copilot
Learn how to leverage GitHub Copilot to make your code more secure.
The post GitHub for Beginners: Security best practices with GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
On my blog: Developer Diary, Pohela Boishakh https://john.colagioia.net/blog/2025/04/14/pohela-boishakh.html #programming #project #devjournal
On my blog: Free Culture Book Club — Nose Ears, part 3 https://john.colagioia.net/blog/2025/04/12/nose-ears-3.html #freeculture #bookclub
Introducing sub-issues: Enhancing issue management on GitHub
Explore the iterative development journey of GitHub’s sub-issues feature. Learn how we leveraged sub-issues to build and refine sub-issues, breaking down larger tasks into smaller, manageable ones.
The post Introducing sub-issues: Enhancing issue management on GitHub ap … ⌘ Read more
On my blog: Toots 🦣 from 04/07 to 04/11 https://john.colagioia.net/blog/2025/04/11/week.html #linkdump #socialmedia #quotes #week
Dino: Dino 0.5 Release
Dino is a secure and open-source messaging application.
It uses the XMPP (Jabber) protocol for decentralized communication.
We aim to provide an intuitive and enjoyable user interface.
The 0.5 release improves the user experience around file transfers and includes two completely reworked dialogs.
Improved file sharingThe way file transfers are currently done in the XMPP ecosystem is limited in functionality a … ⌘ Read more
What the heck is MCP and why is everyone talking about it?
Everyone’s talking about MCP these days when it comes to large language models (LLMs)—here’s what you need to know.
The post What the heck is MCP and why is everyone talking about it? appeared first on The GitHub Blog. ⌘ Read more
Ignite Realtime Blog: New releases for Tinder and Whack!
The IgniteRealtime community is happy to announce releases for two of its projects! Both are for XMPP-libraries that we produce.
Tinder is a Java based XMPP library, providing an implementation for XMPP stanzas and components. Tinder’s origins lie in code that’s shared between our Openfire and Whack implementations. The implementation that’s provided in Tinder hasn’t been written aga … ⌘ Read more
New Docker Extension for Visual Studio Code
Speed up development with Docker DX extension with real-time feedback, smarter linting, and intuitive Bake/Compose file support in VS Code. ⌘ Read more
On my blog: Real Life in Star Trek, Frame of Mind https://john.colagioia.net/blog/2025/04/10/frame-mind.html #scifi #startrek #closereading
How we’re making security easier for the average developer
Security should be native to your workflow, not a painful separate process.
The post How we’re making security easier for the average developer appeared first on The GitHub Blog. ⌘ Read more
Welcoming New Members to Our Technical Advisory Board
We are thrilled to announce the addition of three esteemed industry leaders to our Technical Advisory Board (TAB): Ahmed Bebars from The New York Times, Ben Somogyi from Lockheed Martin, and Kenta Tada from Toyota. Their… ⌘ Read more
Erlang Solutions: Elixir for Business: 5 Ways It Transforms Your Processes
Elixir is a lightweight, high-performance programming language built on the Erlang virtual machine. It’s known for its simple syntax and efficient use of digital resources. But how does this translate to business benefits?
Elixir is already powering companies like Discord and Pinterest. It helps businesses reduce costs, improve process efficiency, and speed up time to market.
Here are five reasons why Elixi … ⌘ Read more
How to request a change to a CVE record
Learn how to identify which CVE Numbering Authority is responsible for the record, how to contact them, and what to include with your suggestion.
The post How to request a change to a CVE record appeared first on The GitHub Blog. ⌘ Read more
Hardening the Firefox frontend
Tom Schuster, Frederik Braun, and Christoph Kerschbaumer have
published an article
on the Firefox Security team’s Attack & Defense
blog that explains recent work to harden Firefox’s frontend code.
We have rewritten over 600 JavaScript event handlers to mitigate XSS
and other injection attacks in the main Firefox user interface. This
mitigation will ship in … ⌘ Read more
oh out of boredom yesterday i made my blog available via markdown files too so you can use charmbracelet/glow to read them in your terminal :)
basically i just set up a file directory on a path of my blog, organized the MD files by year, and so in theory you can navigate to that path and choose a folder, then copy a link to a markdown post and run this:
glow -p https://bubblegum.girlonthemoon.xyz/md/2025/2025-03-31%20premature%20reflections%20on%20sudden%20responsibility.md
and then as long as you have glow installed, you can read my posts from the terminal :D it’s so cool
Components vs. Containers: Fight?
WebAssembly components offer a new way to deploy microservices and other applications in cloud native environments. This naturally raises the question: is the upstart component out to replace containers? Or is this one of those situations… ⌘ Read more
10 Questions to Help You Decide Whether to Hire an SRE or Managed KaaS
Deciding between managing Kubernetes in-house or partnering with a managed service provider can be a difficult choice for organizations seeking to optimize their cloud infrastructure. Over the past several years, I’ve been part of the decision… ⌘ Read more
Run Gemma 3 with Docker Model Runner: Fully Local GenAI Developer Experience
Explore how to run Gemma 3 models locally using Docker Model Runner, alongside a Comment Processing System as a practical case study. ⌘ Read more
Introducing Docker Model Runner: A Better Way to Build and Run GenAI Models Locally
Docker Model Runner is a faster, simpler way to run and test AI models locally, right from your existing workflow. ⌘ Read more
Kubernetes hardening made easy: Running CIS Benchmarks with kube-bench
In today’s world, where security risks and breaches are growing daily, it is crucial to maintain our applications and infrastructure’s compliance with security standards and that is where CIS benchmarks from CIS (Center for Internet Security)… ⌘ Read more
Found means fixed: Reduce security debt at scale with GitHub security campaigns
Starting today, security campaigns are generally available for all GitHub Advanced Security and GitHub Code Security customers—helping organizations take control of their security debt and manage risk by unlocking collaboration between developers and security teams.
The post [Found means fixed: Reduce security debt at scale with GitHub security campaigns](http … ⌘ Read more
Managing multi-line logs with Fluent Bit and Python
In this blog you will learn about: Introduction Logs are essential for monitoring and debugging applications, but not all logs are created equal. While most logs follow a simple line-by-line format, others span multiple lines to… ⌘ Read more
Kubestronaut in Orbit: Iliyan Petkov
Get to know Iliyan His fascination with computers and electronics began early, sparked by his father and fueled by various games and sci-fi movies. Over the years, he developed a passion for open-source technologies, system administration,… ⌘ Read more
Adding to this, we already tried. It didn’t go too well. Slightly related—because it is a third party “integration”—I might be a “smaller group” member, but I don’t care much about one-way feeds (mostly RSS from blogs, news articles, etc.) either.