Blog
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 3525 posts
#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 249#career 229#ai 219#llm 209#devops 196#2026-04 146#security 143#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 61#rag 58#self-improvement 55#learning 53#mlops 53#python 52
virt-launcher, libvirt, QEMU: Where and How the Actual VM Process Runs
Traces how the command server, libvirt connection, domain event monitor, and guest agent poller inside the virt-launcher Pod mesh together to execute the actual QEMU process.
2026-03-20 · 5 min read #architecture#kubevirt#qemu#libvirt#virt-launcherThe Moment a User Request Becomes a VMI: virt-api and Admission Flow
Describes what validation, defaulting, subresource handling, and migration request creation virt-api performs as KubeVirt's API entry point, based on source code.
2026-03-20 · 5 min read #architecture#kubevirt#kubernetes#virtualization#apiKubeVirt Source Code Reading Map: Where to Start to Grasp the Entire Structure
Proposes a reading map for grasping the overall KubeVirt structure quickly by reading source code in the order of API types, controller, node agent, launcher, network, migration, and kernel integration.
2026-03-20 · 6 min read #architecture#kubevirt#source-code#reading-map#kubernetesKubeVirt Network 2: Comparing bridge, masquerade, passt, and SR-IOV Bindings
Explains how KubeVirt's main network bindings -- bridge, masquerade, passt, and SR-IOV -- each configure guest NICs, and how they differ in performance, connectivity, and migration characteristics.
2026-03-20 · 5 min read #architecture#kubevirt#networking#multus#sriovLive Migration 2: The Real Meaning of Pre-copy, Post-copy, Dirty Pages, and Auto-converge
Explains the meaning of pre-copy, post-copy, dirty pages, auto-converge, and pause transitions in the actual data transfer stage of KubeVirt live migration, based on source code.
2026-03-20 · 6 min read #architecture#kubevirt#live-migration#libvirt#qemuHow KubeVirt Runs VMs on Pods
A source-code-level dissection of how KubeVirt runs VMs by reusing Pod scheduling, Pod networking, and Pod storage without modifying Kubernetes itself.
2026-03-20 · 6 min read #architecture#kubevirt#kubernetes#virtualization#qemuCPU, Memory, NUMA, HugePages: How KubeVirt Aligns the Resource Model
Explains how KubeVirt translates VMI CPU and memory requests into launcher Pod resource requests, memory overhead, CPU pinning, NUMA, and hugepages models.
2026-03-20 · 5 min read #architecture#kubevirt#kubernetes#numa#hugepagesHow VMI Spec Gets Converted to libvirt Domain XML
Explains how KubeVirt's converter transforms VMI spec into libvirt domain spec and XML, and how disks, NICs, CPU, and security options are reinterpreted in the process.
2026-03-20 · 5 min read #architecture#kubevirt#libvirt#qemu#domain-xmlvirt-controller Deep Dive: Creating VM Pods with Informers, Queues, and Reconcile
Dissects how virt-controller watches VMIs, Pods, PVCs, and migrations, creates launcher Pods, and propagates state through informers and reconcile loops.
2026-03-20 · 6 min read #architecture#kubevirt#kubernetes#controller#reconciliationVMI Status, Metrics, Guest Agent, Debugging: How KubeVirt Exposes Internal State
Describes how KubeVirt collects and exposes VM internal state through VMI status, guest agent, domain stats, Prometheus metrics, and virt-handler API, based on code analysis.
2026-03-20 · 6 min read #architecture#kubevirt#observability#metrics#guest-agentKubeVirt Network 1: How Pod Networks Become VM Networks
Explains how KubeVirt connects CNI networks attached to Pods to guest NICs through bridge, TAP, DHCP, and NAT layers, and the IP assignment model.
2026-03-20 · 6 min read #architecture#kubevirt#kubernetes#cni#networkingLive Migration 3: Why Migration Proxy, Ports, TLS, and Sockets Are Needed
Explains why KubeVirt places a migration proxy between source and target launchers in live migration, and how it combines ports, Unix sockets, and TLS paths.
2026-03-20 · 5 min read #architecture#kubevirt#live-migration#networking#tlsKVM, cgroup, namespace, tap, netlink: The Kernel Technologies Behind KubeVirt
Describes the roles of Linux kernel technologies -- KVM, cgroup, namespace, TAP, netlink, and VFIO -- that enable KubeVirt to implement VMs on top of Pods.
2026-03-20 · 5 min read #architecture#kubevirt#linux#kvm#cgroupsWhat Do the VM, VMI, and Migration CRDs Represent?
Explains what responsibilities each of KubeVirt's core API types -- VirtualMachine, VirtualMachineInstance, and VirtualMachineInstanceMigration -- has, and why they are separated, based on the source schema.
2026-03-20 · 6 min read #architecture#kubevirt#kubernetes#virtualization#crd[containerd] Image Management: OCI Images and Snapshots
Analyzes the internals of containerd image management. Covers OCI image spec, Content Store, Snapshotter (overlayfs, native, devmapper), image pull flow, and garbage collection at the source code level.
2026-03-20 · 16 min read #containerd#container-runtime#open-source-internals[AWS] Karpenter Complete Guide: Kubernetes Node Auto-Provisioning
A comprehensive guide covering AWS Karpenter v1 architecture, NodePool/EC2NodeClass CRDs, consolidation, drift detection, Spot instance integration, and comparison with Cluster Autoscaler.
2026-03-20 · 14 min read #aws#kubernetes#karpenter[ArgoCD] High Availability and Scalability: Large-Scale Cluster Operations
Analyzing ArgoCD HA and scalability. Covers Controller sharding, Repo Server scaling, Redis HA, performance tuning, monitoring, and disaster recovery strategies.
2026-03-20 · 6 min read #argocd#gitops#open-source-internals[Architecture] Complete Guide to Rate Limiting and API Throttling ♪ Listenable
A comprehensive guide covering rate limiting algorithms (Token Bucket, Sliding Window, etc.), Redis/Nginx/Kong implementations, LLM API cost control, and distributed rate limiting.
2026-03-20 · 18 min read #architecture#rate-limiting#api-gateway#redis#nginx[DevOps] Let's Encrypt and Certbot Complete Guide: Free TLS Certificates
A comprehensive guide covering Let's Encrypt ACME protocol mechanics, Certbot installation and certificate issuance, DNS/HTTP challenges, automatic renewal setup, and wildcard certificates.
2026-03-20 · 9 min read #devops#tls#ssl#letsencrypt#certbot[Linux] Complete Guide to cgroups: The Core of Container Resource Control ♪ Listenable
A comprehensive guide to Linux cgroups (Control Groups): concepts, v1 vs v2 differences, CPU/memory/IO/PID limiting, usage in Docker and Kubernetes, and real-world troubleshooting.
2026-03-20 · 22 min read #linux#cgroups#container#kubernetes#devops