https://sawczuk.dev/ DevOps, Kubernetes, architecture, and infrastructure engineering logs. 2026-08-06T11:00:00.000Z Przemysław Sawczukhttps://sawczuk.dev/ https://sawczuk.dev/insights/windows-cups-postscript-washed-out-text/ 2026-08-06T11:00:00.000Z 2026-08-06T11:00:00.000Z

Black text printed from Windows came out as thin grey dots. The same CUPS queue was perfect from Linux and macOS. The culprit was the Microsoft IPP Class Driver rasterizing the page before it ever left the PC.

https://sawczuk.dev/insights/hp-p1005-cups-firmware-reload-lxc/ 2026-08-06T09:00:00.000Z 2026-08-06T09:00:00.000Z

CUPS reported every job as completed and the HP LaserJet P1005 printed nothing. The cause was a firmware blob that never got pushed, because udev doesn't run inside an unprivileged LXC container.

https://sawczuk.dev/insights/k3s-clock-drift-tls-certificate-failure/ 2026-05-19T16:00:00.000Z 2026-05-19T16:00:00.000Z

My k3s master node went NotReady because system clock drift caused TLS certificates to appear from the future.

https://sawczuk.dev/insights/running-gitea-with-act-runner-fully-local-cicd/ 2026-03-31T18:00:00.000Z 2026-03-31T18:00:00.000Z

I moved all my server and private configs to a self-hosted Gitea instance with act_runner, keeping everything local and away from external CI providers.

https://sawczuk.dev/insights/istio-envoy-lua-http-full-logging/ 2025-10-28T18:00:00.000Z 2025-10-28T18:00:00.000Z

Envoy sidecars in Istio don't log request/response bodies by default. Here's how to solve it with Lua filters and structured JSON logging.

https://sawczuk.dev/insights/bitnami-docker-repository-change-vendor-lock/ 2025-10-25T18:00:00.000Z 2025-10-25T18:00:00.000Z

When Bitnami moved their Docker images to a legacy namespace and deprecated most versions, thousands of deployments broke overnight. Here's what happened and what it teaches about vendor dependency management.

https://sawczuk.dev/insights/production-ready-terragrunt-terraform/ 2024-08-04T17:49:09.000Z 2024-08-04T17:49:09.000Z

Structuring a Terragrunt repository for production IaC — tfenv version pinning, SOPS secrets management, TFLint validation, and pre-commit hooks for code quality.

https://sawczuk.dev/insights/building-rpi-from-the-scratch/ 2022-01-28T22:58:33.000Z 2022-01-28T22:58:33.000Z

Rebuilding a homelab ad-blocker from scratch with Pi-hole, Unbound DNS, and WireGuard VPN — all managed with k3s manifests and Git, because even homelabs deserve GitOps.

https://sawczuk.dev/insights/cloudmapper-aws-security-audit/ 2022-01-28T21:11:38.000Z 2022-01-28T21:11:38.000Z

Using CloudMapper to inventory your AWS environment, visualize resource relationships, and generate security vulnerability reports — in under 10 minutes.

https://sawczuk.dev/insights/git-crypt-sensitive-files-in-git/ 2021-12-20T23:50:13.000Z 2021-12-20T23:50:13.000Z

Using git-crypt to encrypt credentials, keys, and config files directly in a Git repository — without splitting them into a separate secrets manager.

https://sawczuk.dev/insights/github-actions-template-actions-reliable-pipelines/ 2021-12-09T17:47:29.000Z 2021-12-09T17:47:29.000Z

Using official GitHub Actions template actions instead of raw shell steps — node-version pinning, caching, and why this prevents pipeline failures on cloud image updates.

https://sawczuk.dev/insights/multi-site-wordpress-docker-reverse-proxy-ssl/ 2021-11-21T19:23:17.000Z 2021-11-21T19:23:17.000Z

Running multiple WordPress sites with different PHP versions on a single Docker host — using nginx-proxy with Let's Encrypt and automated SSL.

https://sawczuk.dev/insights/format-the-code-automatically-before-commit/ 2021-09-24T14:56:53.000Z 2021-09-24T14:56:53.000Z

Git hooks that enforce formatting, linting, and testing before code reaches CI — eliminating noise in pipelines and establishing a shared quality bar across teams.

https://sawczuk.dev/insights/bitbucket-codecommit-pipeline-sync-ssh/ 2021-08-01T23:01:48.000Z 2021-08-01T23:01:48.000Z

Setting up a Bitbucket pipeline that pushes changes to AWS CodeCommit on every commit — without third-party integrations or additional authentication apps.

https://sawczuk.dev/insights/kubernetes-rbac-read-only-access-tokens/ 2021-08-01T20:28:38.000Z 2021-08-01T20:28:38.000Z

How to give developers read-only access to a running k8s cluster — ServiceAccount, ClusterRole, RoleBinding, and a ready-to-use kubeconfig generator script.

https://sawczuk.dev/insights/gitflow-semantic-versioning-release-engineering/ 2021-07-01T20:41:32.000Z 2021-07-01T20:41:32.000Z

GitFlow branching model combined with automated semantic versioning — how to structure releases, manage hotfixes, and keep the changelog honest.

https://sawczuk.dev/insights/git-merging-strategies/ 2021-06-30T18:23:03.000Z 2021-06-30T18:23:03.000Z

Three git merge strategies and when to use each — with focus on how they impact GitOps workflows, CI/CD traceability, and repository cleanliness.

https://sawczuk.dev/insights/easy-and-fast-file-sharing-from-the-command-line/ 2021-04-17T23:17:32.000Z 2021-04-17T23:17:32.000Z

Using ephemeral, encrypted file sharing in CI/CD pipelines for secure artifact distribution, third-party API responses, and build log uploads — without permanent hosting.

https://sawczuk.dev/insights/inspect-docker-container-run-command-runlike/ 2021-04-17T19:34:54.000Z 2021-04-17T19:34:54.000Z

Using runlike to reconstruct the docker run command from any running container — essential for debugging deployment drift and documenting how services were actually launched.

https://sawczuk.dev/insights/queuing-jobs-is-easier-than-you-think/ 2020-12-10T00:47:47.000Z 2020-12-10T00:47:47.000Z

Task queuing isn't just for backend developers — it's the backbone of resilient CI/CD pipelines, webhook processing, and event-driven infrastructure. Here's how to think about it operationally.

https://sawczuk.dev/insights/docker-in-production-cross-team-reliability/ 2020-11-24T19:39:40.000Z 2020-11-24T19:39:40.000Z

Docker isn't just a dev convenience — it's a production reliability pattern that gives Dev, DevOps, and Ops teams a shared contract for how software is built, shipped, and operated.

https://sawczuk.dev/insights/learning-programming-not-always-have-to-be-boring/ 2020-11-09T00:31:12.000Z 2020-11-09T00:31:12.000Z

How I teach junior developers to think in infrastructure — by building chatbots that eventually run on Docker, get deployed to a VPS, and integrate with message queues like RabbitMQ.

https://sawczuk.dev/insights/magic-of-whiptail-squid-proxy-instalation/ 2020-11-04T21:50:47.000Z 2020-11-04T21:50:47.000Z

Building a bash-based Squid proxy installer with interactive whiptail dialogs, then re-deploying it reliably with Ansible — a pattern for turning one-off scripts into reproducible infrastructure.

https://sawczuk.dev/insights/self-hosted-wireguard-vpn-5usd-vps/ 2020-11-01T21:37:05.000Z 2020-11-01T21:37:05.000Z

Setting up a personal WireGuard VPN on a cheap VPS — bypassing regional locks, avoiding commercial VPN subscriptions, and owning your network infrastructure.

https://sawczuk.dev/insights/pypyr-yaml-pipeline-automation-cicd/ 2020-11-01T17:01:53.000Z 2020-11-01T17:01:53.000Z

Pypyr is a task runner that fills the gaps in cloud CI/CD — handling error conditions, API calls, and parallel execution better than Makefile or plain bash scripts.

https://sawczuk.dev/insights/cloud-native-media-server-rclone-jellyfin/ 2020-10-31T13:50:26.000Z 2020-10-31T13:50:26.000Z

Building a private Netflix with 2TB of cloud storage — using rclone for encrypted mount, Jellyfin for media management, and a lightweight VPS for transcoding.

https://sawczuk.dev/insights/reboot-your-raspberry-pi/ 2020-10-27T23:08:49.000Z 2020-10-27T23:08:49.000Z

Setting up a home DNS sinkhole and WireGuard VPN on a Raspberry Pi — the two services that make every device on your network faster, safer, and accessible from anywhere.