Notes on infrastructure, architecture, and building things that hold up.https://edengelking.com/en-ushttps://edengelking.com/blog/environmental-scores-can-go-up-not-just-down/https://edengelking.com/blog/environmental-scores-can-go-up-not-just-down/Environmental scoring usually turns a scary base score into a smaller number, but it can just as easily push a low, boring finding higher than it started. Here's a real example, and the open source tool I built to make it visible.Fri, 10 Jul 2026 00:00:00 GMTsecuritycvssvulnerability-managementopen-sourcehttps://edengelking.com/blog/the-cia-triad-is-why-severity-means-anything/https://edengelking.com/blog/the-cia-triad-is-why-severity-means-anything/Confidentiality, integrity, and availability aren't security trivia, they're the three questions every vulnerability score is actually answering. Here's what each one means and why integrity is the one most people underrate.Tue, 07 Jul 2026 00:00:00 GMTsecuritycia-triadvulnerability-managementhttps://edengelking.com/blog/that-cvss-10-might-actually-be-a-zero/https://edengelking.com/blog/that-cvss-10-might-actually-be-a-zero/A vulnerability scanner reports a 10.0 and everyone panics. Here's what that number actually measures, why it almost never describes your environment, and how the CVSS calculator can tell you the real story.Mon, 06 Jul 2026 00:00:00 GMTsecuritycvssvulnerability-managementhttps://edengelking.com/blog/minutes-from-commit-to-a-live-cluster/https://edengelking.com/blog/minutes-from-commit-to-a-live-cluster/A CI/CD pipeline that spins up a real, disposable Kubernetes cluster inside a GitLab runner for every commit, deploys it with the same Helm charts as production, and tears it down when it's done. How it worked, and the one thing it demanded from developers in return.Sun, 05 Jul 2026 00:00:00 GMTinfrastructurekubernetesgitlab-cik3dcypressci-cdhttps://edengelking.com/blog/the-key-that-never-touched-the-disk/https://edengelking.com/blog/the-key-that-never-touched-the-disk/A customer needed remote machines to netboot an encrypted disk with no copy of the key anywhere on the image or the hardware. Here's how Kea, Tang, Clevis, and LUKS made that possible.Sun, 05 Jul 2026 00:00:00 GMTinfrastructureencryptionlinuxprovisioningnbdetangclevisluksipxekeahttps://edengelking.com/blog/earning-the-server-room/https://edengelking.com/blog/earning-the-server-room/I inherited an IT department nobody trusted and a server room buried under years of junk. Here's how cleaning it up, one shift at a time, turned into the best compliment I've ever gotten.Sat, 04 Jul 2026 00:00:00 GMTcareerleadershiptrustworkplacehttps://edengelking.com/blog/the-race-condition-that-ate-a-key/https://edengelking.com/blog/the-race-condition-that-ate-a-key/A customer split their data across two encryption keys, a race condition silently overwrote the first one, and nobody noticed until a restore failed. How we got it back using the ext4 journal instead of luck.Fri, 03 Jul 2026 00:00:00 GMTinfrastructureincidentslinuxfilesystemsencryptiondata-recoveryhttps://edengelking.com/blog/iops-not-just-capacity/https://edengelking.com/blog/iops-not-just-capacity/A data center migration, a state-of-the-art storage array, and a production database that needed ten times the IOPS it was built for. Why disk count and capacity planning aren't the same problem as throughput planning.Thu, 02 Jul 2026 00:00:00 GMTinfrastructureincidentsiopsstoragecapacity-planninghttps://edengelking.com/blog/untested-backups/https://edengelking.com/blog/untested-backups/A production outage, a rack of offsite tapes, and the moment we discovered every one of them was unreadable. Why having a backup and having a restore are not the same thing.Wed, 01 Jul 2026 00:00:00 GMTbackupsdisaster-recoveryinfrastructureincidentsvalidationhttps://edengelking.com/blog/hello-world/https://edengelking.com/blog/hello-world/Why I'm starting this blog and what I plan to write about.Mon, 29 Jun 2026 00:00:00 GMTmetacareerinfrastructure