A personal notebook where I can write down technological notes that might be useful to me in the future (and hopefully to others as well).
The intention is to collect technical information in a public place that I might not use frequently, helping myself and possibly others to avoid having to relearn commands or concepts.
Standardized, AI-assisted, source-backed reference documentation for DevSecOps tools and
products. Content is generated from official sources and cites all references. See
docs/ for the full index.
| Product | Description |
|---|---|
| OpenBao | Identity-based secrets and encryption management (LF Edge) |
To update existing docs: tell the agent "update docs for
<product>". To add a new product: tell the agent "add docs for<product>from<URL1>,<URL2>, ...".
- 00_markdown: A cheatsheet for Markdown syntax.
- 01_cryptsetup: How to handle USB drives safely with encryption.
- 02_Fedora40: Notes on post-installation tasks for Fedora 40.
- 03_ConjurCli8: Tracing the usage of the Conjur CLI v8.
- 04_WoeUSB: How to build a bootable Windows USB key from Linux.
- 05_Hugo: Notes on setting up a Hugo blog.
- 06_sshd: Notes on sshd configuration.
- 07_bash_commands: A cheatsheet for common bash commands.
- 08_resize_linux_partition: A guide on how to resize Linux partitions.
- 09_github_copilot_cli: A practical guide to working with GitHub Copilot CLI.
- 10_kitty_terminal: A cheatsheet for the Kitty terminal.
- 11_ghostty_terminal: Configuration guide for the Ghostty terminal emulator.
- 12_docker_sandboxes_sbx: Runbook for Docker Sandboxes (sbx) — running AI agents in isolated microVMs.
-
Mailing Lists
- Cloudseclist: A security newsletter curated by Marco Lancini.
- DevOps'ish: A weekly newsletter that covers everything from DevOps and cloud-native to open source and software development.
- LWN.net Weekly Edition: A weekly newsletter that provides in-depth coverage of the Linux kernel, security, and other open-source topics.
- observability news: Updates around observability (o11y) with a special focus on open source.
- OpenSSF: Marketing emails from the LF and its projects regarding their events, training, research, developments, and related announcements.
- Snyk Security Newsletter: Development and container security vulnerabilities and fixes.
- tldrsec: A weekly newsletter that summarizes the most interesting stories in cybersecurity.
-
Courses
- Automating Supply Chain Security: A free Linux Foundation course on automating supply chain security with SBOMs and signatures.
- Introduction to Cloud Security: A free course by Simplilearn that covers the fundamentals of cloud security.
- Introduction to Kubernetes: A free course by the Linux Foundation on edX that provides foundational knowledge of Kubernetes.
- Deep Dive on Container Security: A free course by AWS Skill Builder that focuses on container security.
- CNCF Slack: The official CNCF Slack workspace.
- OpenSSF Slack: The official OpenSSF Slack workspace.
- OWASP Slack: The official OWASP Slack workspace.
- Open Source Projects
- OpenTofu: A fork of Terraform that is open-source, community-driven, and managed by the Linux Foundation.
- OpenBao: A fork of Vault that is open-source, community-driven, and managed by the Linux Foundation.
- apko: A tool to build and publish OCI container images from apk packages.
- Wolfi: A community Linux (un)distribution built for creating a secure base layer for containers.
- Kubescape: An open-source Kubernetes security platform.
- MarkItDown: A Microsoft Python tool to convert documents to Markdown.
- Fresh: A really nice text editor for your terminal, with default keybindings and mouse support.
- Tool Collections
- Kubetools: A curated list of Kubernetes tools.
- Miscellaneous
- T2 Linux: A guide to installing Linux on unsupported MacBooks with T2 chips.
- OpenSpec: A framework for spec-driven development used in the AI-Automation project to formalize AI agent behavior through detailed specifications.
- GitHub SpecKit: An open-source toolkit by GitHub for formalized spec-driven development with AI coding agents, promoting structured and verifiable AI-powered software development.
- BMAD-METHOD: A framework for agile AI-driven development that leverages specialized AI agents across the development lifecycle, from planning to implementation.
This is a personal notebook, but contributions are welcome. If you have any suggestions or improvements, please open an issue or a pull request.