Notes from building platforms, breaking them on purpose, and flying drones over the results. Written by Mattias Hemmingsson, DevSecOps engineer in Stockholm.
Latest · security
Annotate an Ingress, let samma.io scan it from the internet, and get the findings back into your own cluster as Prometheus metrics, JSON log lines and a Grafana dashboard. How the new Samma collector works.
· 5 min read
How we cut Wazuh down to just the manager and worker in Samma, dropped OpenSearch and the Wazuh dashboard, and shipped alerts over NATS into TimescaleDB and a…
In Sweden you need a spreading permit (spridningstillstånd) to publish aerial imagery finer than 0.5 m. Here is how we built that rule into Ollebo's map…
How I run two always-on AI agents, Dobby for the house and Zoe for work, with OpenClaw on my home Kubernetes cluster. StatefulSet, storage, secrets, local…
How my house runs on Kubernetes: Home Assistant for automations, Zigbee2MQTT with a network coordinator, Mosquitto as the message bus, and solar, battery and EV…
A card on a GitHub project board becomes an outline, then a plan, then a pull request written by an AI agent in my Kubernetes cluster. How the factory works…
How Ollebo turns a drone flight or any GeoTIFF into a fast web map: OpenDroneMap, NATS JetStream, GDAL Cloud-Optimized GeoTIFFs, Terracotta tiles and…
How I run GitHub Actions for five GitHub organizations on my own Kubernetes cluster with Actions Runner Controller: one scale set per org, amd64 and arm64…
How Ollebo connects DJI enterprise drones with no app of our own: DJI Cloud API over MQTT, a live track on the map, automatic photo upload, and live video…
25 October 2026
Your DJI enterprise drone, live in OlleboDJI enterprise drones can now stream their flights straight into ollebo.com. Connect your controller once in DJI Pilot 2, pick your Ollebo space and go fly: the drone shows up live on your map, every flight becomes its own mission, and live video goes to your whole team with one tap. We're looking for pilots to test it.
10 October 2026
Bringing a stack of "dead" Cisco access points back to lifeA pile of old Cisco Aironet 2600/2700 APs power up and get an IP, but every management port is closed: they're lightweight APs that only take orders from a Wireless LAN Controller, and we don't have one. So I reflashed them to autonomous mode over TFTP, and worked around a firmware bug where the recovery TFTP client sends its ACKs to the broadcast address.
7 October 2026
DevOps careers: which skills still matter with AI?So what knowledge is most valuable now: going deep into one tool, like being a DBA who knows their database inside out, or knowing many different types of databases more broadly?
12 August 2026
Platform Engineering Stockholm with Ankra and UpCloudKicking off the autumn season with some hands-on platform engineering: sovereign AI, Kubernetes orchestration, and the tools to run open-source LLMs on your own infrastructure.
Drone mapping, live video and AI workflows for the people who fly.
Ollebo turns drone flights into maps, 3D models and live video that a whole team can work in. Upload photos or GeoTIFFs and they become fast web maps; fly a DJI enterprise drone and it shows up live on the map, with every flight saved as a mission.
Under the hood, uploads go through NATS JetStream to a map-maker that builds Cloud-Optimized GeoTIFFs with GDAL. Live video goes through MediaMTX to HLS and WebRTC. It all runs on a Talos Linux cluster at Hetzner, deployed with ArgoCD, with Keycloak for login.
Open source on GitHub
Kubernetes-native security scanning, with the results in your own SIEM.
Samma runs open-source security scanners from inside your Kubernetes cluster. The operator finds your Ingresses and targets and scans them with Nmap, Nikto, Tsunami and a set of small always-on checks for TLS, DNS, headers and changes over time.
Results go to Grafana or your SIEM, not to yet another dashboard. A web app manages targets and organisations, a SIEM chart on NATS JetStream ships with detection rules, and an MCP server lets AI agents read the latest findings.
Open source on GitHub
API for ollebo.com: create, update and serve maps.
Serves and authorizes Ollebo's private map tiles and 3D models at maps.ollebo.com.
GoodTribes: connecting skilled volunteers with impact-driven organisations.
Kubernetes operator that runs open-source security scanners against your Ingresses and sends results to Grafana.
