Skip to content
andrew.dunn.dev

I'm Andrew Dunn and here you'll find me documenting my explorations through life, analytical computing, and creative computing, exploring ways to make that work accessible to a wider audience.

Recent writing

Essays, TILs, deep dives
July 2026~13 min

Service-to-Service Routing in Rootless Podman

Part one isolated the network planes. The sequel: if every service is in its own plane, how do they talk? The answer is FQDN-everywhere through one always-available local router. Getting there meant a hunt through link-local host access, an SSRF guard that rejected it, pasta's --map-guest-addr, and a careful reading of what podman upstream has actually decided. Plus an epilogue: what happened when the pattern met the whole fleet, and the upstream patch that lets the workaround retire.

June 2026~6 min

Network Plane Isolation in Rootless Podman

Two podman networks alone don't segment traffic in rootless mode, and isolate=true silently fails when netavark uses its iptables backend (the default on Fedora 43 and earlier) thanks to an iptables-nft bug. The root cause, the fix, and how Fedora 44 made it disappear.

May 2026~4 min

Painless Bit-Perfect from Navidrome to a Streamer

Notes from getting a self-hosted music library to play bit-perfect on a network streamer, why the record player is not always the right answer with little kids around, and the small debug package for the closed-source iOS client that was the gap.

May 2026~18 min

A Progressive Vendor Stance for the Agent-Native Future

I emailed Famly support in September 2024 asking for a parent-side data export feature. They couldn't commit it to product (a small SaaS has to chase revenue features), but they pointed me at their API and left me an architecturally accessible position to build the integration myself. Twenty months later, with an AI harness on my side, bairn shipped. That stance is the right one for a world where users will increasingly act through agents.

May 2026~13 min

Enabling Editors to Use Git Without Knowing

Most static-site CMSes make editors learn Git. They shouldn't have to. A small Cloudflare Worker called sveltia-identity-translator lets editors save changes through their existing Workspace identity, while git history attributes correctly.

April 2026~3 min

The Larder Lesson

A pair of scrollytelling lessons that build a small AI harness around meal planning, in Claude Code and Claude Cowork. An applied companion to the AI harnesses series.

Projects

Things I've built

Lessons

Scrollytelling walkthroughs, organized into batches by topic

Life

Travel, cycling, food, reading