HNHacker News
TopNewBestAskShowJobs

bittermandel

224 karma · joined October 22, 2019

Molnett.com - A modern sovereign cloud

jonathan@molnett.com

https://twitter.com/jonathangrahl

submissionscomments
bittermandel··on Swedish government offices to ban ChatGPT and Claude
This seems to only be for a few of the offices as well. A famous project (at least in Swedish news) earlier this year introduced airgapped Kimi-based models for usage, but it got paused.
bittermandel··on We Rebuilt the Linux MicroVM Stack on Apple Silicon
I should do a write-up! Maybe you'll see it posted here soon. We could basically find nothing online...
bittermandel··on We Rebuilt the Linux MicroVM Stack on Apple Silicon
By experience, getting Firecracker to run well on M-series macs is quite the undertaking. I'm not at all surprised Encore decided to take this path considering their customer base!

At Lovable we decided to spend ~1 engineering month getting our sandbox infrastructure to be 100% runnable on Mac and on Linux with predictable builds using Bazel etc.

But we actively decided to take a different route than Encore and run nested virtualization, which on macOS means vfkit -> QEMU -> Kind + Firecracker vm(s). It's been invaluable to get the same development and testing tools on both platforms tbh.

bittermandel··on The 100 hour gap between a vibecoded prototype and a working product
This is exactly my experience at Lovable. For some parts of the organization, LLMs are incredibly powerful and a productivity multiplier. For the team I am in, Infra, it's many times distraction and a negative multiplier.

I can't say how many times the LLM-proposed solution to a jittery behavior is adding retries. At this point we have to be even more careful with controlling the implementation of things in the hot path.

I have to say though, giving Amp/Claude Code the Grafana MCP + read-only kubectl has saved me days worth of debugging. So there's definitely trade-offs!

bittermandel··on The Om Programming Language
I confused this with https://github.com/omcljs/om
bittermandel··on Show HN: Gemini Pro 3 imagines the HN front page 10 years from now
I made this with Lovable as well, it's interesting how it's a bit more extreme in terms of where we are in 2035.

https://hn-frontpage-2035.lovable.app/

> The last JavaScript framework: Why we stopped at React 47 (overreacted.io)

bittermandel··on AI documentation you can talk to, for every repo
I use this heavily to navigate the neondatabase/neon repo and it has been invaluable
bittermandel··on Writing a storage engine for Postgres: An in-memory table access method (2023)
Neon does a variant of this. The WAL goes through a Paxos consensus directly on NVMe, which then is transformed to page files and stored in Object Storage
bittermandel··on Happy 20th Birthday, Django
Django was the whole start of my career and I still thank it for many of my opportunities. I started in 2012 to work with Django at Billogram, then founded a Django consultancy which lead me to work at King 3 years later.

Who knows where I would be today if not for Django!

bittermandel··on Show HN: Sumble – knowledge graph for GTM data – query tech stack, key projects
I just tried this. HOLY CRAP its good. How did you achieve this? I'm very impressed.

Also: Please don't evolve the UI. Its perfect as it is

bittermandel··on Ask HN: What Are You Working On? (June 2025)
We're working on a Container Registry for https://molnett.com. We don't really want to use Harbour as we want to manage our own AuthN/AuthZ and are fully multi-tenant, so we decided to build our own on top of Distribution.

Going from Manifest to OCI is a bit tricky and performance for calculating total storage based on metadata is hard to get right. But the result is that we own our full registry implementation and can take it any direction we want. Quite happy with that!

bittermandel··on The Ingredients of a Productive Monorepo
I don't think you are wrong at all. As we are all founders with an OK salary and this is our area of expertise, so we're able to take advantage of our previous experiences and reap the benefits. We're probably uniquely positioned here.

I had massive issues at my previous employer with Bazel. They did not try to make Bazel work for non-SREs, which as you can imagine didn't work very well. So it's definitely not a silver bullet!

We should probably write a blog post about our setup!

bittermandel··on The Ingredients of a Productive Monorepo
I think this take is quite shallow and lacks insight into how one would actually build a somewhat complex technical platform.

We are not using a microservice pattern at all. I am not sure where you get that from. If anything we have several "macro services".

Our final setup is quite complex as we are building a literal cloud provider, but in practice we have a Go API, a Docker registry, a Temporal Worker and a Kubernetes controller. Whats complicated is everything else around it. We run our platform on bare-metal and thus have auxiliary services like a full-blown Kubernetes cluster, Ory Hydra + Kratos, SpiceDB, Cilium, Temporal Cluster + Workers and some other small things. We need to be able to test this locally to feel safe to release to production. And in turn our production environment is almost identical to our local environments.

None of that would be possible unless we've done something similar to what we have built today. Most companies cannot run their entire stack on their laptop, more unlikely that they could run a full cloud provider.

bittermandel··on The Ingredients of a Productive Monorepo
I firmly believe that us at Molnett(serverless cloud) going for a strict monorepo built with Bazel has been paramount to us being able to make the platform with a small team of ~1.5 full-time engineers.

We can start the entire platform, Kubernetes operators and all, locally on our laptops using Tilt + Bazel + Kind. This works on both Mac and Linux. This means we can validate essentially all functionality, even our Bottlerocket-based OS with Firecracker, locally without requiring a personal development cluster or such.

We have made this tool layer which means if I run `go` or `kubectl` while in our repo, it's built and provided by Bazel itself. This means that all of us are always on the same version of tools, and we never have to maintain local installations.

It's been a HUGE blessing. It has taken some effort, will take continuous effort and to be fair it has been crucial to have an ex Google SRE on the team. I would never want to work in another way in the future.

EDIT: To clarify, our repo is essentially only Golang, Bash and Rust.

bittermandel··on Claude 4
I just used Sonnet 4 to analyze our quite big mono repo for additional test cases, and I feel the output is much more useful than 3.7. It's more critical overall, which is highly appreciated as I often had to threaten 3.7 into not being too kind to me.
bittermandel··on Databricks and Neon
Wouldn't Rook be a good solution? It's definitely proven in much larger settings than Minio, as it's just Ceph.
bittermandel··on Databricks acquires Neon
Big congratulations!

I really do hope that their OSS strategy does not change due to this, as it's really friendly to people who want to learn their product and run smaller deployments. It's (intentionally or not) really hard to run at a big scale as the control plane is not open-source, which makes the model actually work.

bittermandel··on Ask HN: What are you working on? (March 2025)
I'm right now working on the Managed Postgres offering for our European Serverless cloud provider, https://molnett.com/. We're building it around Neon and are happy with it so far, but are stumbling upon unforeseen issues like query modes (Thank you Pgx for not being compatible by default with PGBouncer).

Hope to launch it soon!

bittermandel··on Building a Firecracker-Powered Course Platform to Learn Docker and Kubernetes
This is amazing! We built something similar at Jetstack based on Kata Containers, but it was running in Kubernetes itself.

This is exactly what I would love to build if I had the time <3

bittermandel··on European Cloud, Global Reach
We're definitely heading in the right direction!

Our company's biggest remaining problem is finding a reliable IdP that isn't primarily for individuals, self-hosted or based on Active Directory. There are some alternatives, but they are mainly country-specific (like Freja) or not well integrated enough with e.g. OAuth. We've considered at some point to pivot our company to focus on a fully European IdP, as we feel it's a fundamental missing puzzle piece!

bittermandel··on European Cloud, Global Reach
Odd, why was this post removed from the front page? There's older and less active posts there.
bittermandel··on European Cloud, Global Reach
I didn't expect the comments in here to be so negative.

It's a decent service in itself and a good alternative to many other traditional VM-based hosting companies, which Europe is absolutely full of. They are not really competing with the hyperscalers, nor even Digital Ocean in my opinion, but rather providers that likely sell pre-committed OpenStack clusters and such.

I don't believe they are fully clear of American-owned companies in their entire dependency chain, nor do I believe that it's possible to do that today. Companies like Equinix provide a damn good solution for homogenized infrastructure that is invaluable for cloud providers.

bittermandel··on European Cloud, Global Reach
What do you mean? It is still free, just at a lowered speed. Calling it lies is hyperbolic.
bittermandel··on Dutch Parliament: Time to ditch US tech for homegrown options
Finally! At least one parliament wants to invest in local technology and give the region a fair chance, rather than going with the (today) technically superior hyperscalers. There's no discussion that e.g. Azure solves a lot of problems that EU clouds don't solve today, but diversifying some bets to a local market will definitely pay dividends in terms of local economy and knowledge growth. I hope it pays off.
bittermandel··on Launch HN: Bild AI (YC W25) – Understand Construction Blueprints Using AI
Congratulations to the launch! Funny how two separate companies launch a product in the same space within a short period of time. AI-BOB, https://www.aibob.io/, got a lot of attention during TechArenan in Stockholm last week.
bittermandel··on Claude 3.7 Sonnet and Claude Code
Claude Code works pretty OK so far, but Bash doesn't work straight up. Just sits and waits, even when running something basic like "!echo 123".
bittermandel··on It is no longer safe to move our governments and societies to US clouds
There's quite a lot going on over the last year or two to actually build a real cloud in Europe, which is basically nott just dedis/VMs like on Hetzner or OVH. Take a look at Clever Cloud or Molnett!
bittermandel··on It is no longer safe to move our governments and societies to US clouds
Definitely is, it triggered us at Molnett, Clever Cloud, Safespring and others to start believing in competing with the hyperscalers!
bittermandel··on The DevOps Engineer's Handbook
> With DevOps, if you can automate it, you should automate it.

I couldn't agree less with this. At this point the whole "DevOps" industry is fueled by consultancies who make a great living from convincing business leaders that this is true. Focusing on defining clear processes for recurring events and building the fundamental building blocks that allows you to automate when it's absolutely needed should be the method, not spending more time writing Terraform.

bittermandel··on Kubernetes on Hetzner: cutting my infra bill by 75%
We're very happy to use Hetzner for our bare-metal staging environments to validate functionality, but I still feel reluctant to put our production there. Disks don't quite work as intended at all times and our vSwitch setup has gotten reset more than once.

All of this makes sense considering the extremely low price.

Page 1 of 2Next →