Container is a great tech, but it has problems with security: weak isolation. To cover for it, our company has a policy that enforce all containers in our k8s cluster must run as non-root users. However, there ‘s still some exceptions that need root privileges, like our mail relay pod…

Domain name service (DNS) is one of the oldest services on the internet, and also one of the most importance out there — it ‘s even being mentioned as “the very heart of the Internet network”. Everyone in the field know what dns is — a phone book for internet…

At coccoc, we have many VMs running, with different purposes: personal sandbox, builders, backing services for dev environment … But we only have limited resources for them, so we must pack as many VMs on physical servers as possible. …

Prelude Second part of the journey: the mistakes. As we ‘re started to enter a new domain, it ‘s easy to make mistakes, or I must say that it ‘s unavoidable (at least in my case, where I must start from zero, and learn things the hard ways). Furthermore, perf test…

Disclaimer: I must admit: I’m a system admin and a newbie to performance testing, so the content will be very basic. This blogpost will be helpful for ones that start to tread on to the dark realm of performance test (or the ones who intent to do so), to see how…