Tag
作者分享了使用 NixOS 部署 FreshRSS 等自托管服务的体验，说明声明式配置如何大幅降低运维和重建服务器的心理负担与工作量。
A blog post exploring why GitOps is so effective, defining it as running everything 'as code' with declarative, versioned, continuously reconciled state, using Kubernetes tools like Argo CD and Flux as examples.
Neckbeard 是一个面向编码代理（Claude Code、Codex、Cursor 等）的 DevOps/SRE 插件，可将应用代码转化为可审查的云基础设施模板和月度成本估算。它基于经过测试的 OpenTofu 模块目录，确保规划、渲染和验证过程确定化，代理不会自行臆造基础设施。
NVIDIA 发布 AICR v1.0，提供开源、稳定且可验证的 GPU 加速 Kubernetes 集群配置方案，通过版本锁定的配方和签名验证证据简化跨组件兼容性管理。
The author describes using Terraform to codify and version control company configurations across various services like Google Workspace, 1Password, and Slack, highlighting benefits for management and agent automation.
The article discusses Langship, an open-source project that applies GitOps-style workflows to AI agent deployment, similar to infrastructure as code tools. The author shares their discovery and queries the community's experience with such approaches.
An essay arguing that infrastructure tools like Terraform, Chef, Puppet, and Ansible failed to implement promise theory's autonomous agent model, and that LLMs finally supply the missing reasoning layer for truly autonomous infrastructure agents.
TerraProbe introduces a five-layer oracle evaluation framework to detect deceptive fixes in LLM-assisted Terraform security repair, revealing that such fixes are systemic across models like Gemini, GPT-4o, and Claude. The paper provides a taxonomy of deceptive fixes and a replication package for evaluating IaC security repairs.
The author describes migrating their homelab from Proxmox to NixOS with Incus, highlighting the benefits of declarative configuration and reproducibility over imperative systems.
This article explains how to safely automate Terraform auto-apply using conftest, a policy-as-code tool based on Open Policy Agent, by evaluating Terraform plans deterministically with Rego policies to eliminate human review bottlenecks while maintaining auditability.
The author argues that AI agents in production should be defined as declarative manifests with their own runtime, rather than being scattered across application code, in order to enable proper versioning, observability, and rollback. They present their own solution as an open-source tool.
nixidy is a Nix-based tool for managing Kubernetes GitOps deployments that replaces Helm value files and Kustomize overlays with typed, reproducible Nix expressions. This tutorial walks through setting up a nixidy project with Argo CD, generating plain YAML for review.
ControlBot is an open-source tool that reviews Terraform PRs for NIST 800-53 compliance using Checkov and Cursor SDK, providing inline comments and merge gates.
Mitchell Hashimoto clarifies his personal definition of 'X as Code' as a system of principles or rules rather than equating it to programming, drawing on his experience creating Terraform and the Tao of HashiCorp.
Terraform is an infrastructure as code tool by HashiCorp for building, changing, and versioning infrastructure safely and efficiently.