Suga

None of this is novel, it's just easy to forget when you're moving fast. Full post on how we think about blast radius at Suga: suga.app/blog/containin…

3. Finally the container itself. A read-only filesystem, minimal environment variables and a fresh boot on every restart strips the attacker's toolkit. Nothing to write, nothing to persist, nothing to pick back up after a restart.

The internet gets fully scanned every 6 minutes. `masscan` can hit every public IPv4 address at 10M packets per second from a single machine. The question isn't whether you'll get scanned, it's how much damage a breach can do once they're in. Three layers most prod setups leave wide open 🧵

🤔

Read more ↓ suga.app/changelog/043-…

Dev Update - Changelog #043 Fun GitHub API fact we learned the hard way: `repo.size` is updated by a background job that can lag over an hour. So `size === 0` doesn't actually mean empty. If you need to know, check whether the branch list is empty instead.

Decided to freshen up the Suga site 💇. Thoughts?

Dev Update - Changelog #042 Noticed your builds finishing quicker lately? Read more ↓ suga.app/changelog/042-…

Read more ↓ suga.app/changelog/041-…

Dev Update - Changelog #041 For the few of you who noticed, build logs weren't streaming live every time. Fixed, along with a couple of related log quirks.

Go go isomorphism. @zero__ms mutators elegantly solve so many problems.

Built a real-time sync engine with @zero__ms for @sugasrc. What it’s actually like building it, and the decisions you run into along the way. thenewstack.io/real-time-sync… @thenewstack

Full update ↓ suga.app/changelog/040-…

Dev Update - Changelog #040 A few quick UX fixes in this one. Networking is much simpler to use, and deployment errors now have guidance on what to do when things go wrong.

Dev Update - Changelog #039 The old service nodes just showed a name and a status dot. Now they show source, network, mount path, and separate indicators for live status vs pending changes. Big visual improvement. Full update -> suga.app/changelog/039-…

Dev Update - Changelog #038 Dashboard statuses are more honest now, with graceful handling of drops from our critical services rather than confusing errors on your end. Full update -> suga.app/changelog/038-…

Dev Update - Changelog #037 A few quick canvas fixes this week: nodes no longer hide behind the config panel, new services open straight to config, unmounted volumes no longer fly off screen, and undo now restores deleted nodes to their original position. Full update -> suga.app/changelog/037-…

Dev Update - Changelog #036 Repo and branch search in Suga now uses fuzzy matching, so typos and partial names still find what you're looking for. Plus clearer "not found" messages when there's no match. Full update -> suga.app/changelog/036-…