Skip to content~/articles | ls -t
Writing
Designing a crash-safe single-file container
BFC's on-disk format puts the index at the end, opens a container from its last 56 bytes, and never rewrites what is already written. What that buys, and what it leaves visible.2 minbfcOne format, two kernels: mounting BFC on Linux and FreeBSD
The same read-only container format implemented as a Linux VFS module and a FreeBSD vnode filesystem, compared side by side.2 minbfcfs-linuxFreeBSD from Go, without shelling out
Seven libraries replace jail(8), ifconfig, route, ngctl, pfctl, zfs and bhyvectl with native kernel and library interfaces, and an exporter ties them together.3 mingo-freebsd-jails-exporterFrom godi to goboot: dependency injection without reflection
A string-keyed reflection container, then a compiler that resolves the whole dependency graph with go/types and writes the wiring as plain Go.2 mingobootO²L: everything is an object, nothing is null
Design notes on a small object-oriented language, covering its single-variant value model, immutable objects, and the places where purity gave way to practicality.2 mino2lA tamper-evident audit log in two pages of flash
How OpenHSM records every operation in a 32 KB ring on an STM32U585, chains the entries with truncated HMACs, and lets the host verify the chain.2 minopenhsmAuto-unsealing OpenBao with a USB HSM on an STM32U585
A tour of OpenHSM, from USB transport and secure session to key store and secure boot, and an honest list of what still stands between it and production.3 minopenhsmWhen the Go struct is 92 bytes and the kernel wants 152
How a hand-written rt_msghdr made a whole route package silently useless, and the C-probe test that pins every ABI struct in go-freebsd-ifc now.3 mingo-freebsd-ifc