Engineering
Docker, Linux, networking, proxies, self-hosting, and deployment engineering
Technical Blog
Practical notes on automation, deployment, and developer workflows
Right now the site is grounded in three solid tracks: Docker and server deployment, Git workflow habits, and Markdown-driven publishing pipelines. AI automation content will expand on top of that, so the homepage now pushes topic hubs and flagship posts first instead of acting like a plain feed.
Recent Updates
MCP Client Errors: Distinguishing HTTP 503, JSON-RPC Errors, and isError
Pinned Cakewalk source, MCP 2026 compatibility rules, and 11 local Node.js tests show how to classify HTTP, JSON-RPC, tool and SSE failures without unsafe retries.
Can Vercel Daemons Replace a VPS Background Worker? Limits, SIGTERM, and Configuration
Vercel Daemons vs a VPS worker: Python/Container Functions, 10 vCPU-hour Hobby quota, SIGTERM and idempotent retries, with a reproducible offline Node.js test.
GitHub AI Scan found two shell risks, but the security check passed
A real GitHub AI Scan PR received two vulnerability comments while the dynamic Actions job stayed green. What its advisory results, CodeQL, Rulesets and billing mean.
Keeping Core Code Off GitHub in Plaintext: Win/Mac Bare Git, Cryptomator Backups and Mobile AI Trade-offs
Why a GitHub private repo wasn't enough for valuable commercial source code: local Win/Mac Git Central, encrypted Cryptomator offsite backups, encrypted Git remote tradeoffs, and the mobile AI-development bottleneck.
Is an AI SSH Client Safe? Hatoba's E2EE, Model Data Flows, and Command Approval
Where do an AI SSH assistant's terminal logs and credentials go? Inspect Hatoba v0.3.0 source for E2EE sync, D1 metadata, approval rules, and six independent synthetic crypto checks.
Stop Claude Code from Running Destructive Commands: Testing Laya Guard (Regex + 322M Local Model) via PreToolUse Hooks
Testing laya-guard, a local command guard for AI coding agents: 12 regex pre-filters + a 322M on-device model, three reproduced bypasses, a 30-case eval, real latency numbers, and an npm run deploy false positive — with practical deployment advice.
CLIProxyAPI + Codex Setup: Docker, OAuth & Reverse Proxy Guide
Set up CLIProxyAPI for Codex with Docker, complete OpenAI OAuth login, expose your own /v1 endpoint, and connect Codex to the proxy. Includes common setup failures and fixes.
pnpm 12.11 Lets npm Dependencies Carry Agent Skills: After Approving Once, What Should You Check on Upgrade?
pnpm 12.11.0 lets npm packages provide instructions for AI agents through Agent Skills, with package-level permissions controlling whether links are created. This article examines what that approval covers, what to review when upgrading dependencies, and the limits of a synthetic test of the permission model.
Gatus Docker Compose Test: When a Service Returns 503, Do Alerts Fire and Resolve?
Hands-on Gatus v5.37.0 experiment with HTTP 503 failure thresholds, recovery webhooks, startup connection refusal, and SQLite restart persistence.
PanelAlpha Engine Tested: Can AI Manage VPS and Replace GitHub Self-hosted Runner?
A practical test of PanelAlpha Engine v2.1.1 on an independent Ubuntu VPS, comparing an AI Hosting Control Plane with GitHub Self-hosted Runner.
Docker pull Hangs on macOS? Check credential helpers and DOCKER_CONFIG
A silent Docker pull on macOS may be waiting on a credential helper. A first-party experiment shows how DOCKER_CONFIG, credsStore, credHelpers, and empty auths actually behave.
How to Refresh a WARP Egress IP When Gemini Rejects Your Location
When Gemini returns User location is not supported even though WARP looks healthy, this walkthrough shows how to verify the real SOCKS5 egress, reconnect WARP, compare exits, and narrow the failure down.
How to Deploy OpenClaw: Local Source Setup vs Docker
If you want to install OpenClaw quickly, the hard part is not the command. It is choosing the right path for your laptop, your VPS, and your long-term maintenance cost.
Back Up Docker Volumes to GitHub: a Low-Cost Disaster Recovery Setup for 1Panel
If you run services with Docker and 1Panel, this workflow gives you a practical safety net: back up volumes every day, keep seven local days, and sync archives to a private GitHub repository with Git LFS.