Certificates in a chain file should start with the “final” certificate (the cert issued to you). Each following certificate should be the issuer of the previous one.

Sometimes more is less.

All my existing software projects and the articles in this blog have been released into the public domain.

Here’s the tech I use at home and what for.

🔍 Git bisect When you’re trying to troubleshoot a bug, finding the original commit is often helpful as it gives you context. Enters git bisect! If you haven’t already, consider taking a short detour to the documentation. This command uses a binary search algorithm to find which commit in your project’s history introduced a bug. 🤙 The manual way git bisect works by taking a “good” commit and a “bad” one and from there it will checkout a commit in between....

Today I learned that recursively changing the owner of a directory tree in a Dockerfile can result in some serious increase in image size. 🚛 The issue You may remember how in a previous post we used a small example to discuss layers and final image size. Well, here’s our example again, slightly modified. # Dockerfile FROM ubuntu WORKDIR /app RUN fallocate -l 100M example RUN chown 33:33 example Given that the base image weighs ~75MB, we could expect the final image to weigh ~175MB (~75 from the base image + ~100 from the big file we generated)....

In previous posts we talked about poetry and Docker images layers and I promised I would write about Docker multi-stage builds, so here we go! Note I will explain the basics of Docker multi-stage builds required to understand the post, but I won’t repeat the documentation (see further reading). ⚙️ Multi-stage builds Basically a multi-stage build allows you to sequentially use multiple images in one Dockerfile and pass data between them....

At ITSF, teams using the same languages/frameworks regularly meet to share experience and decide on common guidelines. With the Python teams, we recently decided to change our dependencies management system to something more robust because we were not satisfied with pip alone. ✅ Requirements Here’s a list of the features we expected from our new tool: It must manage transitive dependencies1 for us. Developers should only have to specify the direct dependencies of their projects....

👨🏻‍💻 TL;DR In my case with fish I added this line to my config.fish: set -gx PIPX_DEFAULT_PYTHON "$HOME/.pyenv/versions/3.8.5/bin/python" It’s roughly the bash equivalent for export PIPX_DEFAULT_PYTHON="$HOME/.pyenv/versions/3.8.5/bin/python" 📖 Backstory As a Python developer, my workflow often involves running multiple versions of Python on different projects. To help me in this task, I use pyenv which is a wonderful tool to easily install and manage multiple Python versions on your system. I also have a Python version installed via Homebrew for some formulae that require it....

In this post, we’ll walk through Docker image layers and the caching around them from the point of view of a Docker user. I’ll assume you’re already familiar with Dockerfiles and Docker concepts in general. ✌️ The two axioms of Docker layers There are two key concepts to understand, from which everything else is deduced. Let’s call them our axioms. Axiom 1 Every instruction in a Dockerfile results in a layer1....