Platform and infrastructure

The open fork of Terraform. Same workflow, different license.

Start with

tofu init && tofu plan -out=tfplan

The gotcha

State is the crown jewels. Remote, locked and backed up before anything else.

Agentless, idempotent, and readable by people who will never write it.

Start with

ansible-playbook -i inventory site.yml --check --diff

The gotcha

--check lies for anything that depends on an earlier task having actually run.

Rootless by default, which removes a whole class of local exposure.

Start with

podman build -t myimage:dev . && podman run --rm -it myimage:dev

The gotcha

Rootless networking differs from Docker. Port binding below 1024 is the usual first surprise.

A real cluster on modest hardware. What I use for edge and lab work.

Start with

curl -sfL https://get.k3s.io | sh -

The gotcha

Defaults to its own ingress and storage class. Know which before you debug a manifest that works elsewhere.

VMs and containers on one box, with snapshots that make experiments reversible.

The gotcha

Runs only on a Proxmox host, so there is no command here to try from your laptop. Snapshots are not backups either. They share the disk that is about to fail.