IIoT Ingress Postmortem: Troubleshooting EMQX 5.8 Under Podman Rootless

A postmortem of an IIoT ingress deployment failure: under Podman Rootless, EMQX 5.8 exposed unstable Erlang IPC, HOCON schema validation failures, a blocked security-group port, and M2M requests rejected by CSRF middleware. This post covers the confirmed causes, fixes, and validation path.

2026-05-28 · 9 min · 1807 words · YUCHENG MING

TrafficMonitor CPU Optimization Postmortem: An Engineering Simplification from 4% to 0.6%

A postmortem on CPU optimization under a high-frequency polling workload: by shrinking the UI logging path, removing high-frequency state machines, and fixing the wait model, CPU usage dropped from 3.6%~4.2% to 0.1%~0.6%.

2026-04-26 · 5 min · 974 words · YUCHENG MING

Rootless Podman + Systemd Supervision Failure Postmortem: Diagnosing and Repairing a Broken Recovery Path

A postmortem on a failed recovery path under Rootless Podman + Systemd user units, covering confirmed contributing factors, concrete remediation work, validation steps, and remaining risks.

2026-04-03 · 16 min · 3347 words · YUCHENG MING

JWT Dual-Token Hardening Postmortem: From Stateless Refresh to Revocable Redis Sessions

A security hardening postmortem for JWT AT/RT architecture: treating Redis reservation as completed and implementing RT rotation, replay detection, and revocable sessions.

2026-03-23 · 4 min · 784 words · YUCHENG MING

HTTPS Upgrade Triggered 403: A Deep Postmortem from Security Middleware to Container Isolation

A postmortem on a persistent 403 after HTTPS migration, traced to both missing CSRF allowlist updates and Podman Rootless image namespace isolation.

2026-03-17 · 3 min · 517 words · YUCHENG MING