Blog
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 3525 posts
#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 249#career 229#ai 219#llm 209#devops 196#2026-04 146#security 143#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 61#rag 58#self-improvement 55#learning 53#mlops 53#python 52
[containerd] Networking and Storage ♪ Listenable
Analyzes containerd networking and storage internals. Covers CNI integration, network namespaces, volume mounts, device access (GPU), SELinux/AppArmor at the source code level.
2026-03-20 · 19 min read #containerd#container-runtime#open-source-internals[containerd] Container Lifecycle Management
Analyzes containerd container lifecycle management. Covers container creation, OCI runtime spec, Task execution, shim lifecycle, checkpoint/restore, and runtime classes (runc, kata, gVisor, Wasm) at the source code level
2026-03-20 · 15 min read #containerd#container-runtime#open-source-internals[containerd] CRI Implementation: Kubernetes Runtime Integration ♪ Listenable
Analyzes containerd CRI implementation internals. Covers CRI gRPC service, Pod Sandbox, container spec translation, streaming (exec/attach/port-forward), RuntimeClass, and NRI (Node Resource Interface) at the source code
2026-03-20 · 18 min read #containerd#container-runtime#open-source-internalscontainerd Architecture Internals
Analyzes the architecture of containerd, the industry-standard container runtime. Covers gRPC API, plugin system (services, snapshotter, runtime), plugin registration/initialization/dependency resolution, CRI implementat
2026-03-20 · 3 min read #containerd#container-runtime#open-source-internalsCilium Network Policy Engine: L3/L4/L7 Filtering Implementation
Analysis of the Cilium network policy engine covering policy repository, Identity-based enforcement, L3/L4 eBPF enforcement, L7 Envoy proxy, FQDN policies, audit mode, and endpoint regeneration.
2026-03-20 · 9 min read #cilium#ebpf#networking#open-source-internalsCilium Hubble Observability Platform Internal Analysis
Internal analysis of the Cilium Hubble observability platform covering architecture, Relay, UI, L3/L4/L7 flows, Prometheus metrics, CLI, gRPC API, and performance tuning.
2026-03-20 · 9 min read #cilium#ebpf#networking#open-source-internalsCilium ClusterMesh: Multi-Cluster Networking Internal Implementation
Analysis of Cilium ClusterMesh internals covering etcd architecture, global services, cross-cluster policies, Identity synchronization, KVStoreMesh, and external workloads.
2026-03-20 · 7 min read #cilium#ebpf#networking#open-source-internalsCilium Architecture Internals: The Core of eBPF-Based Networking
Deep analysis of Cilium internals including the Cilium Agent, Operator, eBPF datapath, BPF maps, Identity allocation, and endpoint lifecycle.
2026-03-20 · 10 min read #cilium#ebpf#networking#open-source-internalsCilium eBPF Datapath Deep Dive: Packet Processing Pipeline
Deep analysis of the Cilium eBPF datapath covering packet flow, BPF program chaining, connection tracking, NAT engine, DSR mode, and socket-level load balancing.
2026-03-20 · 11 min read #cilium#ebpf#networking#open-source-internals[ArgoCD] Sync Engine Analysis: Everything About Synchronization Mechanisms
Analyzing the core mechanisms of the ArgoCD Sync engine. Covers Sync Phases, Resource Hooks, Wave ordering, Pruning, Diff engine, Health Checks, and Retry strategies in detail.
2026-03-20 · 9 min read #argocd#gitops#open-source-internals[ArgoCD] Architecture Internals: Source Code Level Deep Dive
A source-code-level analysis of ArgoCD core components: API Server, Repository Server, Application Controller, Redis, and Dex.
2026-03-20 · 10 min read #argocd#gitops#open-source-internals[ArgoCD] Security Model: Authentication, Authorization, and Secret Management
Deep analysis of the ArgoCD security model. Covers authentication (SSO, OIDC, LDAP), RBAC authorization, repository/cluster credentials, secret management, and network security.
2026-03-20 · 7 min read #argocd#gitops#open-source-internals[ArgoCD] ApplicationSet Controller Deep Dive
Deep dive into the ArgoCD ApplicationSet controller. Covers Generator types, template rendering, Progressive Sync, Go templating, and Reconciliation Loop in detail.
2026-03-20 · 7 min read #argocd#gitops#open-source-internals[Architecture] Complete Guide to LiteLLM: Unified Serving of 100+ LLMs
A comprehensive guide on integrating 100+ LLMs through a single API with LiteLLM, covering Proxy server setup, cost tracking, rate limiting, load balancing, and production deployment.
2026-03-20 · 15 min read #architecture#litellm#llm#ai-gateway#mlopsvirt-handler Deep Dive: What the VM Node Agent Next to kubelet Does
Analyzes why virt-handler is deployed as a per-node DaemonSet, how it bridges launcher Pods and libvirt domains, and how it handles networking, storage, and status reporting.
2026-03-20 · 6 min read #architecture#kubevirt#kubernetes#virt-handler#virtualizationHow Disks and Volumes Attach to VMs
Describes the preparation process through which container disks, PVCs, DataVolumes, hostDisks, and hotplug volumes become guest disks in KubeVirt, based on source code.
2026-03-20 · 5 min read #architecture#kubevirt#storage#pvc#datavolumeSELinux, seccomp, Device Access: How KubeVirt Maintains Security Boundaries
Analyzes how KubeVirt combines SELinux, seccomp, cgroup device rules, and privileged helpers to simultaneously maintain VM execution and security boundaries, based on internal code.
2026-03-20 · 6 min read #architecture#kubevirt#security#selinux#seccompHow Multus and Secondary Networks Connect in KubeVirt
Explains how KubeVirt connects secondary networks to VMIs using NetworkAttachmentDefinition, Multus annotations, and interface status updates.
2026-03-20 · 5 min read #architecture#kubevirt#multus#cni#networkingLive Migration 1: From Migration CRD to Target Pod Creation
Explains from the control plane perspective how virt-controller orchestrates policy, capacity, timeouts, and target Pod creation after a VirtualMachineInstanceMigration object is created.
2026-03-20 · 6 min read #architecture#kubevirt#live-migration#controller#kubernetesEviction, Drain, Migration Failure Modes: How KubeVirt Handles Failures
Analyzes how KubeVirt handles node drain, eviction, live migration failures, post-copy irrecoverable states, and non-migratable conditions through status fields and code paths.
2026-03-20 · 6 min read #architecture#kubevirt#migration#eviction#drain