Devops

Clone a Private Repo Using GitHub Secrets in GitHub Actions Cloning a private repository inside another GitHub Actions workflow is a common use case — whether you’re reusing shared scripts, configs, or tools. Here’s how to do it securely using GitHub Secrets. 🔐 Step 1: Generate a Personal Access Token (PAT) Go to GitHub > Settings > Developer Settings > Tokens. Click “Generate new token” (classic or fine-grained). Grant the following scopes: repo for private repos read:org if the repo is under an organization Copy the token (you won’t see it again). 🔑 Step 2: Add the Token to Secrets In your destination repo: ...

💽 RAID Explained Modern infrastructure demands resilience, speed, and data integrity. Whether you’re managing a homelab, a Proxmox cluster, or a full-scale data center, RAID (Redundant Array of Independent Disks) is foundational. In this blog, I break down what RAID is, how each level works, when to use them, and the trade-offs involved. We’ll also explore how RAID fits into virtualized environments like QEMU and how to use it responsibly even with modern filesystems like ZFS. ...

🔐 How I Handle Secrets in My DevOps Workflows — A GPG-First Approach to Security As someone who frequently automates deployments and manages infrastructure—across Proxmox clusters, Linux servers, and CI/CD pipelines—I take the handling of secrets seriously. In a world where credentials are often hardcoded into scripts or buried in dotfiles, I wanted a system that was: Tamper-proof Auditable Public-repo friendly Portable across machines And, most importantly, zero-trust by design So I built a secret management system around GPG-based encryption, leaning on battle-tested cryptography and deliberate design. ...

Docker If you’re running Arch Linux and want to get Docker up and running fast — including Docker Compose — here’s a clean, one-liner way to do it using the AUR. 🛠️ The One-Liner sudo pacman -Syu --noconfirm docker && yay -S --noconfirm docker-compose && sudo systemctl enable --now docker && sudo usermod -aG docker $USER This command does the following: Updates your system (pacman -Syu) Installs Docker from the official repos Installs Docker Compose from the AUR (via yay) Enables and starts the Docker service Adds your current user to the docker group so you can use Docker without sudo 🔁 Post-Install Tip After running this, log out and log back in to apply the group change. ...