Joe

And a developer with admin rights will never admit that they’ll quit on short notice in a few months, leaving hard to support snowflakes, each based on the latest cool fad at the time of writing.

Both k8s and aws native services can be chaotic and snowflaky… An organization should be working to standardize the tech stack and deployment tooling across teams as much as possible.

K8S is an opportunity to standardize, but the potential is often not realised. Platform Engineering is now the latest kid on the block, trying to address the next layer of challenges. We’ll see how this looks in a few years…

What do you have against the project and the people behind it? It sounds personal.

There are plenty of non-commercial Linux distributions. Some managed better than others. Some generic, some with niches. OpenWRT is a favourite of mine.

Mandatory coat check-ins, here we come!

With apparmor, you could enable and disable profiles that could restrict access to files and paths by name.

For network traffic, it’s possible to use dnsmasq to blacklist or whitelist some domains.