Writing

SysOps Articles

Content on system operations, infrastructure management, automation, and maintaining reliable environments.

PHP2SHELL (CVE-2026-109618): Patching a Small PHP Estate on Release Day

How we prepared for and patched PHP2SHELL (CVE-2026-109618 and CVE-2026-109619) across native, Docker and Kubernetes PHP, from a Slack leak to the last site back.

Is 100% uptime a bad goal?

Should you aim for 100% uptime across your servers? Or instead target fluid infrastructure where short lived nodes can spawn and die as required?

Blocking TOR exit routes

How do we go about blocking TOR / Onion traffic to our site?