Alessandro Lo Manto · Head of DevOps & Infrastructure
I run the metal under AI, blockchain and the web
Production for Osmosis by day. Notes on Kubernetes, agent sandboxes and validators: different workloads, the same disks, the same network, the same 3 a.m. page.
Read all 5 notes- AIU42agent sandboxIn service Run Claude Code safely with dangerously-skip-permissions in k8s agents sandbox
- AIU41operatorIn service Building My Own Kubernetes Operator for OpenClaw
- Chainvalidator infraIn service Osmosis production, the day job
- WebU40this blog Overkilled Infrastructure for a Blog
- BaseU39certification Tips and Tricks CKAD Exam
Same rack, different loads
A GPU node, a validator and a web API look nothing alike in a slide deck. In the rack they are boxes that run out of disk, drop packets and page someone at 3 a.m. The work is knowing where they differ.
| AI agents | Validators | Web services | |
|---|---|---|---|
| Compute | GPUs, bursty, expensive to leave idle | Dedicated nodes, steady, never preempted | Cheap replicas that scale out |
| State | Agent workspaces and model weights | Chain state on local NVMe, snapshots to resync | A database somewhere else |
| Isolation | Untrusted code, no host credentials | Signing keys behind sentry nodes | Namespaces and network policy |
| At 3 a.m. | An agent loops and burns the budget | The node falls behind and misses blocks | A certificate expires |
AI agents
- Compute
- GPUs, bursty, expensive to leave idle
- State
- Agent workspaces and model weights
- Isolation
- Untrusted code, no host credentials
- At 3 a.m.
- An agent loops and burns the budget
Validators
- Compute
- Dedicated nodes, steady, never preempted
- State
- Chain state on local NVMe, snapshots to resync
- Isolation
- Signing keys behind sentry nodes
- At 3 a.m.
- The node falls behind and misses blocks
Web services
- Compute
- Cheap replicas that scale out
- State
- A database somewhere else
- Isolation
- Namespaces and network policy
- At 3 a.m.
- A certificate expires
Rated for
Each badge links to its record on Credly.
Reach me
No contact form. Pick the port that fits.