Blog¶
Welcome to my blog! Here you'll find articles about DevOps, AWS, cloud architecture, and more.
Recent Posts¶
pivot_root: How a Container Gets Its Own Filesystem¶
May 9, 2026 - How pivot_root(2) swaps a process's root directory at the mount namespace level — and why it's the proper isolation primitive instead of chroot. Part three of the Sheep & Shepherd series.
Re-Exec Pattern: Why Go and clone() Don't Get Along¶
May 2, 2026 - Go's threading model conflicts with clone(). The self re-exec pattern fixes it — part two of the Sheep & Shepherd series.
Linux Namespaces: Isolating a Process in 50 Lines of Go¶
April 28, 2026 - A container is a process with a restricted view of the system. How to isolate a process using Linux namespaces in 50 lines of Go — the first part of the Sheep & Shepherd series.
AI sovereignty: your own model on DGX Spark instead of an API¶
April 18, 2026 - How I stopped paying OpenAI and moved inference onto my own DGX Spark box with vLLM. About the hardware, the CUDA/PyTorch pain, an honest comparison with Ollama, and a small web UI to run it all.
EMM: LangGraph traces in Phoenix¶
April 11, 2026 - One init at startup covers 15 LangGraph agents. Manual spans extend coverage to voice (Gemini Live tools), avatar (Runway sessions), and Izabella chat (OpenAI/Ollama/Google + MCP tool loop).
EMM: A2A Inspector in the app and MCP for it¶
April 8, 2026 - Built-in UI plus an MCP server: inspect the Agent Card, run tasks/submit and tasks/status from the IDE without leaving the monorepo.
EMM A2A Phase 4: Auth, Rate Limiting, Observability¶
April 4, 2026 - X-API-Key, rate limiting, structured logging. A2A endpoints now protected like other APIs.
AI Reliability Engineering — certification from fwdays¶
March 31, 2026 - Completed the AI Reliability Engineering course from fwdays. Why AI system reliability belongs in the same conversation as classic SRE.
EMM A2A Phase 3: Stream task status¶
March 28, 2026 - SSE instead of polling. GET /api/a2a/tasks/{id}/stream. Theory, diagrams, capabilities.streaming.
EMM A2A Phase 2+: TaskStore and tasks/status¶
March 21, 2026 - A2A task lifecycle: submit → taskId → poll status. InMemoryTaskStore, 1h TTL. Diagrams.
Production Technology Risks: Planning for When Dependencies Fail¶
March 14, 2026 - PostgreSQL, MinIO, lakeFS: when choosing production technologies, think beyond features — what happens in 5 years?
EMM A2A Phase 2: Task Manager (list_board)¶
March 14, 2026 - Second skill — list_board. Routing by skillId, interaction diagrams, what changed.
EMM A2A Phase 1: Process Manager as A2A Server¶
March 7, 2026 - Process Manager is the first agent with an A2A interface. Protocol theory, interaction diagrams, what's implemented.
How I Became an AWS Community Builder¶
March 5, 2026 - A few years ago it was regular DevOps — deploys, scripts. Then I started thinking in clusters instead of servers. Here's how that led to AWS Community Builders.
Developing and Testing AI Agents: From LangGraph to Production¶
February 12, 2026 - How to write, test, and debug LangGraph agents? Which patterns work for StateGraph? Why are pytest fixtures critical? Development workflow from first code to production deployment.
Data Versioning for AI Agents: Real-World Experience with lakeFS¶
February 8, 2026 - When AI agents start moving your files around, version control stops being theoretical. Here's how integrating lakeFS changed my approach to data management in a LangGraph-based agent platform.
Kubernetes Deployment for AI Agents: Real-World Experience with LangGraph¶
February 3, 2026 - When AI agents move from local Docker Compose to Kubernetes, questions emerge about service discovery, caching, secrets management. How I deployed 7 microservices with minimal downtime.
Building MCP server for self-hosted Jira and Confluence.¶
November 19, 2025 - Building MCP server for self-hosted Jira and Confluence.
Izabella. Create agentic tools. Convertor from pdf to fb2 format.¶
October 30, 2025 - Izabella. Create agentic tools. Convertor from pdf to fb2 format.
Building a multi-site apartment searcher: Design patterns and architecture¶
October 16, 2025 - Building a multi-site apartment searcher: Design patterns and architecture.
Tarot AI Agent: Innovative Approach to Risk Assessment Through Artificial Intelligence¶
September 11, 2025 - Tarot AI Agent: Innovative Approach to Risk Assessment Through Artificial Intelligence.
Using AWS ECR as a Universal OCI Repository¶
July 10, 2025 - Using AWS ECR as a universal OCI repository for storing various types of artifacts.
Cert Manager in Kubernetes¶
June 3, 2025 - Setting up and using Cert Manager for automatic management of SSL certificates in Kubernetes.
New Architecture for Isabella - C4 Diagrams¶
May 14, 2025 - Development of a new system architecture using C4 diagrams.
New Architecture for Isabella - Structure¶
May 14, 2025 - Detailed structure analysis for the new Isabella architecture.
New Architecture for Isabella¶
May 10, 2025 - Overview of the new architecture design for Isabella project.
Waste Resources - Financial Optimization in the Cloud¶
April 14, 2025 - Analysis and optimization of cloud resource costs.
Redis Backup on AWS S3¶
March 19, 2025 - Automation of Redis backup to AWS S3.
RDS Import with Terraform¶
February 17, 2025 - Importing existing RDS instances into Terraform.
RDS Import with Terraform (EN)¶
February 17, 2025 - Importing existing RDS instances into Terraform (English version).
AWS Lambda Cost Optimization¶
February 26, 2025 - Strategies for optimizing AWS Lambda costs.
Kubernetes Onboarding with Flux¶
March 10, 2025 - Automating Kubernetes onboarding using Flux.
RDS Migration Cases¶
February 9, 2025 - Various scenarios for migrating databases to AWS RDS.
SPA Deployment on S3 with CloudFront¶
February 12, 2025 - Deploying Single Page Application on AWS S3 with CloudFront.
Karpenter Properties¶
December 8, 2024 - Properties and configuration of Karpenter for Kubernetes.
AI Stable Diffusion¶
February 8, 2025 - Using Stable Diffusion for image generation.
ARM vs AMD¶
December 5, 2024 - Comparison of ARM and AMD architectures for cloud solutions.