platform engineer. i build the boring reliable layer under other people's services, and small sharp tools for myself when the existing ones give up.
most of what i do professionally is private, so this page is the part you can read: macos internals, terminal tooling, and a wine runtime that should not work but does.
open to work · dappy.lgbt
ratatouille · go · a TUI cleaner for mac
macos says "system data: 235 gb" and then refuses to elaborate. rat answers the question:
where the space went down to the directory, what is safe to remove with the evidence for each
call written down, and whether the drive itself is healthy.
it never removes anything you did not mark, and it logs everything it does.
glass · go · a live console for running go services
erlang ships a remote shell, rails ships a console, go ships a debugger. glass is the missing
one. three lines in main, then attach over a unix socket and read or poke live objects while
the service takes traffic.
in := glass.New()
in.Define("stats", stats)
console.Serve("/tmp/app.sock", in)winecx-gptk · c, ci · a gptk wine runtime that should not work
apple's game porting toolkit only executes on crossover-derived wine builds, because d3dmetal patches their unixcall internals at load time. so i rebased crossover 26.3's wine diff onto upstream wine 11.15 via a synthetic three-way merge and put the whole thing in ci.
steam's ui end to end, d3d12 through d3dmetal at feature level 12_2, dxvk, msync. the llvm-mingw bug that stalled steam's login took a module bisection to find.
wlipurk-appkit · nix · hermetic flipper app builds
a fap only runs if it was built against the exact firmware sdk it loads on, and the official catalog will not serve our custom flipper fork. this pins fbt's toolchain in a nix flake and builds catalog apps from source against our own sdk, with no network reach at build time.
samsung-ac-remote · c · because my remote broke
samsung a/c has no one-shot ir codes, only full state frames with a dual-section checksum. so every button press retransmits the entire state: power, mode, temperature, fan, swing.
a flipper zero fap, built against the f6/f7 fbt sdk.
kubernetes clusters and the pipelines that feed them. eks, karpenter, helm, k9s when something is on fire. infrastructure in opentofu and ansible, secrets in vault and sops, aws underneath.
the parts i actually care about: making deploys uneventful, making the failure mode legible before someone has to guess, and deleting the runbook step that a machine should have been doing. none of it is public, which is the nature of the work, so take the repos above as evidence of how i think instead.
languages go · swift · c · nix · python
platform kubernetes · eks · karpenter · helm · k9s · opentofu · ansible · vault · sops · aws
day to day macos on nix-darwin · fish · a flipper zero that has ruined several evenings
