Field notes
What I learned building platforms that banks trust.
Hands-on notes from a DevOps engineer: Kubernetes, GitLab CI/CD, Terraform, Proxmox, air-gapped networks and security checks in pipelines.
Trivy was compromised twice in 2026. How a shared GitLab CI template for 90+ teams should run security scanners
Trivy compromised in 2026 shows why a shared GitLab CI template must pin scanners by digest, mirror images and DBs into Nexus, and verify signatures.
Proxmox Terraform with bpg: 5 LXC containers, 6 cloud-init VMs and the state drift I caused myself
bpg/proxmox Terraform provider in a real homelab on Proxmox VE 9: least-privilege API token, LXC, cloud-init VMs, import blocks, targeted applies, CI.
Air-gapped Nexus: delivering GPG-signed packages into a bank's closed network
How packages get into an air gapped Nexus repository: sign on the connected side, verify before upload, keep an audit trail. Pattern, Python gate, Nexus API.