15 January 2026
Streamlining CodeQL Analysis with CodeQL Wrapper
How our CodeQL Wrapper simplifies adoption of GitHub's advanced security analysis tool
devops
5 September 2024
Adding algebraic data types to Nickel
A recent release of Nickel added algebraic data types and pattern matching. This blog post explains the motivation behind this addition, the design choices made, the considerations around backward compatibility and how ADTs can be useful for a configuration language.
29 August 2024
Deploying Buildbarn on Kubernetes with mTLS on the side
No packet should pass unencrypted or unauthenticated.
18 April 2024
Cloud Native Computing in 2024—feeling the pulse at Kubecon
We just came out of Kubecon 2024. Here are our impressions of the trends and evolutions in infrastructure, configuration management and cloud native computing
30 May 2023
Announcing Tf-Ncl 0.1
With Nickel releasing 1.0 I'm excited to announce the 0.1 release of Tf-Ncl, a tool for writing Terraform deployments with Nickel instead of HCL.
23 February 2023
Taking the pulse of infrastructure management in 2023
We went to FOSDEM23 and CfgMgmtCamp23. Here are my impressions of the trends and evolutions in infrastructure and configuration management
11 October 2022
Worry-free NixOS refactors
Comparing Nix input hashes can guarantee that some refactors are bug-free.
15 September 2022
How to keep a Bazel project hermetic?
A collection of helpful tips for Bazel users.
18 August 2022
Introduction to NixOS specialisations
How and when to use NixOS specialisations to manage different boot environments
31 July 2020
Nix Flakes, Part 3: Managing NixOS systems
How to manage NixOS systems using Nix flakes.
8 July 2020
Setting up Buildkite for Nix-based projects using Terraform and GCP
How to setup a Buildkite-based CI for Nix projects with workers running on GCP.
9 April 2020
Setting up a shared build cache using Bazel
How to set up a remote Bazel cache, and why it is a good idea.
21 November 2019
Untrusted CI: Using Nix to get automatic trusted caching of untrusted builds
Learn how Nix's new post-build hooks feature can automatically sign and upload artifacts to a binary cache in a trusted way.
3 April 2019
Securely storing secrets in Terraform with terraform-provider-secret
28 March 2019
Introducing lorri, your project's nix-env
7 March 2019
Configuring and testing Kubernetes clusters with KubeNix and kind
20 February 2019
Clodl: build, copy, and run
12 December 2018
DIY benchmark history with Criterion and Shiny
19 October 2017
Announcing the GHC DevOps Group
6 September 2017