Series
Read it in order.
Longer arcs, written to be read start to finish rather than dipped into.
FinOps from Zero to Production
A tagging policy that nobody enforces is worse than no tagging policy. Here's how to design a tagging taxonomy that survives contact with real engineering teams — with enforcement mechanisms, exceptions handling, and the tags that actually drive cost allocation decisions.
AI, ML, LLMs, and Neural Networks: A Practitioner's Introduction
A precise definition of machine learning, the difference between supervised, unsupervised, and reinforcement learning, and why understanding the category matters before choosing an approach.
Platform Engineering: From Concept to Internal Developer Platform
Platform engineering is not rebranded DevOps. It is a specific organisational and technical discipline that treats internal infrastructure as a product. Here is what that actually means.
Linux: A Complete Practical Course
How Linux storage works from physical disk to mounted filesystem — block devices, partition tables, LVM for flexible volume management, filesystem creation and tuning, and NFS for network storage.
Containerization from the Ground Up
Containers are not lightweight VMs. They are processes with resource constraints and namespace isolation. Understanding the actual mechanism makes you a better user of Docker, Kubernetes, and every container runtime.
DevSecOps Pipeline
Default Kubernetes configurations are not production-secure. Here are the specific hardening controls — RBAC, Pod Security Standards, network policies, image policies, secrets management — that reduce attack surface and what each actually protects against.