Notes from building platforms, breaking them on purpose, and flying drones over the results. Written by Mattias Hemmingsson, DevSecOps engineer in Stockholm.
Latest · security
How to run the Wazuh agent as a Docker container that watches the host through read-only mounts, connect it to a Wazuh manager on Kubernetes, and run several agents side by side on one machine.
· 4 min read
security ·
security ·
security ·
drones ·
A new forestry map group in Ollebo: tree height, slope, ditches and terrain from Skogsstyrelsen and Lantmäteriet, with licence checks built into the code. Plus…
How I run two always-on AI agents, Dobby for the house and Zoe for work, with OpenClaw on my home Kubernetes cluster. StatefulSet, storage, secrets, local…
How my house runs on Kubernetes: Home Assistant for automations, Zigbee2MQTT with a network coordinator, Mosquitto as the message bus, and solar, battery and EV…
A card on a GitHub project board becomes an outline, then a plan, then a pull request written by an AI agent in my Kubernetes cluster. How the factory works…
How Ollebo turns a drone flight or any GeoTIFF into a fast web map: OpenDroneMap, NATS JetStream, GDAL Cloud-Optimized GeoTIFFs, Terracotta tiles and…
How I run GitHub Actions for five GitHub organizations on my own Kubernetes cluster with Actions Runner Controller: one scale set per org, amd64 and arm64…
How Ollebo connects DJI enterprise drones with no app of our own: DJI Cloud API over MQTT, a live track on the map, automatic photo upload, and live video…
Welcome to Your New Desktop Once your Ubuntu desktop is up and running, your next step will be to install your favorite applications. Ubuntu offers multiple…
25 October 2026
Your DJI enterprise drone, live in OlleboDJI enterprise drones can now stream their flights straight into ollebo.com. Connect your controller once in DJI Pilot 2, pick your Ollebo space and go fly: the drone shows up live on your map, every flight becomes its own mission, and live video goes to your whole team with one tap. We're looking for pilots to test it.
10 October 2026
Bringing a stack of "dead" Cisco access points back to lifeA pile of old Cisco Aironet 2600/2700 APs power up and get an IP, but every management port is closed: they're lightweight APs that only take orders from a Wireless LAN Controller, and we don't have one. So I reflashed them to autonomous mode over TFTP, and worked around a firmware bug where the recovery TFTP client sends its ACKs to the broadcast address.
7 October 2026
DevOps careers: which skills still matter with AI?So what knowledge is most valuable now: going deep into one tool, like being a DBA who knows their database inside out, or knowing many different types of databases more broadly?
12 August 2026
Platform Engineering Stockholm with Ankra and UpCloudKicking off the autumn season with some hands-on platform engineering: sovereign AI, Kubernetes orchestration, and the tools to run open-source LLMs on your own infrastructure.
Drone mapping, live video and AI workflows for the people who fly.
Ollebo turns drone flights into maps, 3D models and live video that a whole team can work in. Upload photos or GeoTIFFs and they become fast web maps; fly a DJI enterprise drone and it shows up live on the map, with every flight saved as a mission.
Under the hood, uploads go through NATS JetStream to a map-maker that builds Cloud-Optimized GeoTIFFs with GDAL. Live video goes through MediaMTX to HLS and WebRTC. It all runs on a Talos Linux cluster at Hetzner, deployed with ArgoCD, with Keycloak for login.
Open source on GitHub
Kubernetes-native security scanning, with the results in your own SIEM.
Samma runs open-source security scanners from inside your Kubernetes cluster. The operator finds your Ingresses and targets and scans them with Nmap, Nikto, Tsunami and a set of small always-on checks for TLS, DNS, headers and changes over time.
Results go to Grafana or your SIEM, not to yet another dashboard. A web app manages targets and organisations, a SIEM chart on NATS JetStream ships with detection rules, and an MCP server lets AI agents read the latest findings.
Open source on GitHub
Serves and authorizes Ollebo's private map tiles and 3D models at maps.ollebo.com.
API for ollebo.com: create, update and serve maps.
The samma.io web app: manage scan targets, read results and administer organisations.
osquery client that ships host query results to the Samma SIEM over mutual TLS
Read-only MCP server: let AI agents list samma.io scan targets and fetch the latest scan results
