Sign in

Ryan Munz

@ryanmunz.com
246 followers 207 following 268 posts

Senior Solutions Architect & DevOps Engineer, CISSP I build things and then nerd out over infrastructure minutia only I care about!

PostsRepliesMedia
Reposted by Ryan Munz
🦷👁️Alex Rochon👁️🦷 @alexrochonva.bsky.social · 20/06/2026
The underlying idea of Leeroy at the end is to keep holding on, no matter how bad it gets, and to let others in to help you. You never know what’s on the horizon and you CAN make changes to make your life better, so don’t give into despair.
122205140
Reposted by Ryan Munz
Chakra Khan @thechakrakhan.bsky.social · 25/05/2026
We finally saw the Norwegian sun! At 11 PM 🇳🇴
A hazy, foggy 11 PM summer sunset over the North Sea just off the coast of Norway. The sky is an hue and is reflecting off the water.
1412
Ryan Munz @ryanmunz.com · 21/05/2026
Old video, but these are interesting. I might try to get ahold of an s70 to pair with Ollama. The manufacturer has been working on a PR and has their own branch. www.youtube.com/watch?v=qPMp...
youtube.com
China's Moore Threads MTT S80 GPU Review | A New Challenger Appears
YouTube video by Gamers Nexus
000
Ryan Munz @ryanmunz.com · 17/05/2026
I had no idea how much I needed this Open Policy Agent rego in my life until it stopped me from throwing random things in the default namespace like 6 times in a day.
000
Ryan Munz @ryanmunz.com · 17/05/2026
Tinkering with Nexus, it's annoying that it doesn't expose publish dates. So uv pip's "exclude-newer" can't function. Means it's an either/or choice instead of progression (you either use uv pip's config OR you pay for Sonatype IQ out the gate).
000
Ryan Munz @ryanmunz.com · 02/05/2026
copy.fail Funny thing about copy/fail. The *default* kernel in al2023 (Amazon Linux) is based on 6.1 and is not susceptible to this (tested the poc in a virtual machine). However most "optimized" images (like the EKS ones) are using kernel6.12 which is. I believe there's a kernel6.15 as well.
copy.fail
Copy Fail — 732 Bytes to Root
CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.
110
Ryan Munz @ryanmunz.com · 16/04/2026
blog.cloudflare.com/email-for-ag... Interesting. If you're in cloudflare your dns is already there. Not having to duck with DKIM/DMARC/SPF for simple use cases would be nice. I'm curious if they're going to move in on MXToolbox's DMARC report monitoring stuff.
blog.cloudflare.com
Cloudflare Email Service: now in public beta. Ready for your agents
Agents are becoming multi-channel. That means making them available wherever your users already are — including the inbox. Today, Cloudflare Email Service enters public beta with the infrastructure la...
000
Ryan Munz @ryanmunz.com · 21/03/2026
arstechnica.com/security/202... Fun
arstechnica.com
Widely used Trivy scanner compromised in ongoing supply-chain attack
Admins: Sorry to say, but it's likely a rotate-your-secrets kind of weekend.
000
Ryan Munz @ryanmunz.com · 13/03/2026
This is cool. This is how I learned. samhenri.gold/blog/2026031...
samhenri.gold
“This Is Not The Computer For You” · Sam Henri Gold
Sam Henri Gold is a product design engineer building playful, useful software.
000
Reposted by Ryan Munz
Internet Archive @archive.org · 26/09/2025
The #InternetArchive microfiche digitization #livestream is now at a new address. Tune in at the link below & enjoy real-time preservation work with mellow lo-fi vibes in the background. 📡 www.youtube.com/live/SxUjwZY... #DigitalPreservation #LiveNow
youtube.com
lofi Archive radio 🎞️ beats to scan/read microfiche to
Off Hours? Watch a 2hr stream at https://www.youtube.com/watch?v=gibUecoF1bEEver wonder how government documents, locked away on tiny sheets of microfiche, b...
113835
Ryan Munz @ryanmunz.com · 27/09/2025
github.com/ryanmunz/ter... I had a reason to play with an SSH bounce box in Spain along with Spot Instances. The part I don't mention is that you can do this to get a socks5 proxy on localhost (once you setup DNS to forward correctly). ssh -D 8080 ec2-user@spot-bastion.env.local
github.com
GitHub - ryanmunz/terraform-spot-bastion: This project uses Terraform to deploy a bastion host using AWS Spot pricing discoverable via DNS.
This project uses Terraform to deploy a bastion host using AWS Spot pricing discoverable via DNS. - ryanmunz/terraform-spot-bastion
010
Ryan Munz @ryanmunz.com · 15/09/2025
Proxmox would make my year if they added a run-cmd field to the cloud-init interface. I just want a userAgent script primitive on-prem, it's so close. www.linkedin.com/posts/ryanmu...
linkedin.com
Proxmox Server Solutions I love you guys, and I'd love to know what it would take to get you to fix one thing. Add support for run-cmd to the cloud-init interface https://lnkd.in/dEMC7DHJ You&#39...
Proxmox Server Solutions I love you guys, and I'd love to know what it would take to get you to fix one thing. Add support for run-cmd to the cloud-init interface https://lnkd.in/dEMC7DHJ You've got ...
040
Ryan Munz @ryanmunz.com · 07/09/2025
www.youtube.com/watch?v=vtIz... This was an excellent watch, I picked it up as a CISSP Class B CPE. I'm not always the greatest at expressing myself. TLDR no one cares what's in your head if you can't express why it should have value to them.
youtube.com
LEADERSHIP LAB: The Craft of Writing Effectively
YouTube video by UChicago Social Sciences
040
Ryan Munz @ryanmunz.com · 22/06/2025
I'm upset that I know exactly what this is.
020
Ryan Munz @ryanmunz.com · 19/02/2025
I'm not dead. Working on some non-tech projects and had a health *thing* I've got some proxmox terraform stuff in the cooker and an integration I want to rework using cloudflare workers. Still enjoying being married!
020
Ryan Munz @ryanmunz.com · 29/01/2025
Oh... you can do this... curl --upload-file /path/to/file.ext -u 'DOMAIN\Username' smb://172.16.17.52/ShareName/ Curl be wild'n sometimes.
020
Ryan Munz @ryanmunz.com · 29/01/2025
...it's going to be amusing if I end up writing about my adventure installing Ubuntu 22.04 on my Android just to make it run Doom. Also learning some interesting Android stuff. Graylog <= syslog/k3s/cloudwatch logs once I finish writing it up.
110
Ryan Munz @ryanmunz.com · 17/01/2025
I'm enjoying writing about my interview questions. Softball writeup, but I *was* a little busy getting married. www.ryanmunz.com/posts/what-d...
ryanmunz.com
What Don't You Do
Flipping the script on an interview question
010
Ryan Munz @ryanmunz.com · 17/01/2025
Sorry, normally I'd have content out this week but I was a little occupied with getting married. In a snowstorm even. I'm annoyed that I didn't think of this as it's a good bit: www.youtube.com/watch?v=AAZQ...
youtube.com
Billy Idol - White Wedding (Part 1)
YouTube video by BillyIdolVEVO
110
Reposted by Ryan Munz
Barnacules @barnaculesnerdgasm.com · 12/01/2025
If you're trying to upgrade to Windows 11 24h2 and you keep getting an error saying that your PC has a driver or service preventing the upgrade. It is EasyAntiCheat 99% of the time! Would be nice if Setup just told me that instead making me slog through XML files. 🤦‍♂️ #TechTip
Generic message from Windows 11 installer telling you that something is blocking the upgrade without telling you what it is, but the XML files generated from setup absolutely show what it is and Microsoft just doesn't want you to know it's EasyAntiCheat or it's many other forms. XML file showing what blocks setup with this message, it's EasyAntiCheat. Nice of Microsoft to tell you what is blocking. Also, once you uninstall it you have to remove the folders from Program Files also or it still thinks you have it installed.After pressing refresh after removing EasyAntiCheat and its folders suddenly you can now do the upgrade. Honestly, I don't know if I would even consider this an upgrade since 24H2 is just more intrusive than 23H2 but I know they will force it at some point so I want to explore it now.
4259
Ryan Munz @ryanmunz.com · 12/01/2025
I don't remember why I have a folder that is just Emerald Tree Boas but it does not require any justification to live on my laptop forever.
Emerald Tree Boa
120
Ryan Munz @ryanmunz.com · 11/01/2025
Great test for terminal capabilities when you log in.
010
Ryan Munz @ryanmunz.com · 07/01/2025
Oh hey, 100 followers. And some of them aren't python scripts.
000
Ryan Munz @ryanmunz.com · 07/01/2025
Resume Driven Development. The bane of my existence that isn't named Wordpress. www.ryanmunz.com/posts/rdd/
ryanmunz.com
The Bad Call Is Coming From Inside The House
What is the biggest insider threat you're worried about?
010
Ryan Munz @ryanmunz.com · 06/01/2025
TIL that LinkedIn horribly mangles URLs above 32 characters. And will continue to do so even if you edit the url to be shorter. That's not deflating at all. Anyway, I wrote up some NAT Instance over NAT Gateway stuff I needed documented to my spec. www.ryanmunz.com/posts/nat-in...
ryanmunz.com
Nat Using a Gateway Today
Simple NAT Instance setup in lieu of a NAT Gateway
000
Reposted by Ryan Munz
Josh W. Comeau @joshwcomeau.com · 30/12/2024
What are the most exciting/useful dev things you’ve discovered in 2024? Could be devtools, libraries, new language features, educational resources, whatever 😄
6014117
Ryan Munz @ryanmunz.com · 02/01/2025
Using toml over yaml, json or even a boring list of var = values is starting become an indicator of "your software is high maintenance"
000
Ryan Munz @ryanmunz.com · 01/01/2025
In case you were wondering, installing kubernetes using the official documentation in 2024 is still atrocious. Use k3s and save yourself hours of annoyance. The only reason I'm even looking at kubeadm is for the CKA
100
Ryan Munz @ryanmunz.com · 30/12/2024
Waiting on terraform apply is the 2024 version of this: xkcd.com/303/
xkcd.com
Compiling
000
Ryan Munz @ryanmunz.com · 29/12/2024
@raynarvaezjr.sucks @tinanarvaezjr.com I'm so sorry to hear about Tina's gall bladder issues. Damn the medical system for making you wait on otherwise routine surgery. #TeamTina
000
Ryan Munz @ryanmunz.com · 27/12/2024
This is a pretty slick subdomain finder. Doing a workup on a company and my usual sources were coming up dry. I'm curious what they're pulling from. subdomainfinder.c99.nl
subdomainfinder.c99.nl
Subdomain Finder - C99.nl
Subdomain Finder is a scanner that scans an entire domain to find as many subdomains as possible.
000
Ryan Munz @ryanmunz.com · 27/12/2024
Everyone has one of these keyword lists on their resume with zero detail. I figured I’d actually organize mine and write a few drop in sentences. www.ryanmunz.com/skills/
ryanmunz.com
Skills
This is a long one...
000
Ryan Munz @ryanmunz.com · 26/12/2024
Congratulations on @raynarvaezjr.sucks and @tinanarvaezjr.com marriage! Couldn't have happened to nicer people 😊
000
Ryan Munz @ryanmunz.com · 26/12/2024
I think my "kanban" board is pretty bougie. Not an ad for Expedient, I just have their post-it notes for some reason.
000
Ryan Munz @ryanmunz.com · 25/12/2024
I like this guy, no notes. I'm sitting around reading a few of his posts on Christmas with the @piratesoftware.live stream on another screen and enjoying the experience. www.michaelbissell.com/29149a10-a73...
michaelbissell.com
Michael Bissell
I'm a thought leader and technology strategist with over 30 years of experience in software technology development. My skills fit as an Enterprise Architect, CIO, Chief Evangelist, or other roles that...
000
Ryan Munz @ryanmunz.com · 25/12/2024
Doom can be pretty. "Walking Lava" from Literalism.wad,
010
Ryan Munz @ryanmunz.com · 22/12/2024
This is a very silly way to exfiltrate data. I know how to make this bidirectional. Once I familiarize myself with a couple of golang libraries I need to make it work I'll write a very silly TUN/TAP device. www.ryanmunz.com/posts/base32...
ryanmunz.com
Base32 Over Dns
Showing off some nonsense you can do with recursive dns
000
Reposted by Ryan Munz
Daniel Zappala @zappala.bsky.social · 21/12/2024
A wide variety of academic work on this. 1) A classic paper: dl.acm.org/doi/10.1145/... 2) ieeexplore.ieee.org/document/951... 3) Redirect tracking: petsymposium.org/popets/2020/... 4) Bypassing GDPR: dl.acm.org/doi/abs/10.1... 5) CNAME cloaking: ieeexplore.ieee.org/document/940...
ieeexplore.ieee.org
IEEE Xplore Full-Text PDF:
2111
Ryan Munz @ryanmunz.com · 21/12/2024
I picked this copy at random, but there's a thing on YouTube of playing 10 hours of the front view of a norwegian train. These are wonderful for parties as it's something I can put on the TV, while encouraging people to not just... stare at the damn tv. www.youtube.com/watch?v=3rDj...
youtube.com
[9:56 Hours] Train Journey to the Norwegian Arctic Circle, WINTER [1080HD] SlowTV
YouTube video by SlowTV Relax&Background
000
Ryan Munz @ryanmunz.com · 21/12/2024
I don't want to brag, but I did spend like 2 hours building a gitea workflow that does literally nothing except make dummy commits to a private github repo to make my heatmap pretty. I run my own infrastructure but people look at github! Don't judge me! 😁
020
Ryan Munz @ryanmunz.com · 21/12/2024
I don't always agree with Krugman's takes. But I do hope he does well now that he's left NYT. "Vibecession," is quite the word (not his but where I heard it). paulkrugman.substack.com/p/a-win-for-...
paulkrugman.substack.com
A Win for the Vibecession Story
Guess what? Popular economic narratives aren’t reliable
000
Ryan Munz @ryanmunz.com · 21/12/2024
Oh hey, there's a draft STIG benchmark out for Ubuntu 22.04. Benchmarks plug into your SCAP tooling, which is useful if you're engineering an environment with compliance requirements. Just in time for me to need... exactly that! public.cyber.mil/stigs/downlo... (search for 22.04 benchmark)
public.cyber.mil
000
Ryan Munz @ryanmunz.com · 20/12/2024
No, really, just give me a shell. I'm not interested in discussing the subject. www.ryanmunz.com/posts/no-rea...
ryanmunz.com
No Really, Let Me Shell
Working around missing container tools
000
Ryan Munz @ryanmunz.com · 18/12/2024
Running an apt repository mirror... without running an apt repository mirror. I've reversed engineered this for a bunch of different devices but this is just about Ubuntu. www.ryanmunz.com/posts/mirror...
ryanmunz.com
Mirror Mirror in the DMZ
A way less painful way of running a local linux repository than apt-mirror
000
Ryan Munz @ryanmunz.com · 17/12/2024
I want to like terrascan more for IAC checks, but it has some weird ideas about what should kick out an exit code. Like if you use the recursive option, and there is a folder with no terraform files, it'll exit 4? Makes pipelining it awkward.
000
Ryan Munz @ryanmunz.com · 15/12/2024
Event Log Forwarding isn't the only log option under Windows. You don't have to suffer from their abuse or general inability to consistently work correctly! www.ryanmunz.com/posts/nxlog-...
ryanmunz.com
Event Log Forwarding Can't Hurt You Anymore
Building a basic IDS setup for Windows using NXLog and Sumologic
000
Ryan Munz @ryanmunz.com · 14/12/2024
How do you fix chmod -x /usr/bin/chmod? www.ryanmunz.com/posts/chmod-...
ryanmunz.com
chmod -x /usr/bin/chmod
Showing off a linux execution bit quirk
000
Ryan Munz @ryanmunz.com · 14/12/2024
This was fun. I may or may not have been in the story of the "does nothing" firewall. Who can say? www.youtube.com/watch?v=YYJt...
youtube.com
Episode 7: Certifications, Mentorship, and Auditor Missteps
YouTube video by Distilled Security Podcast
000
Ryan Munz @ryanmunz.com · 12/12/2024
I needed one of these for awhile. Random promoted LinkedIn post, give me the dopamine to write the thing! www.ryanmunz.com/posts/i-was-...
ryanmunz.com
I was blind, but now I see... at least a little bit
Dirty linux monitoring prompted by LinkedIn
000