Status update: omhttp, CI, backlog, and containers

Time goes fast, it is Sep 10 already. Mid August I said we will do a great refactoring of omhttp within a week or two. Well, that did not work out as planned. We still made solid progress, but more pressing work put it on hold for a bit. Time for a small update of what is happening in rsyslog.

Symbol image for “Status Update” type of postings. (Image: Rainer Gerhards via AI)
Continue reading “Status update: omhttp, CI, backlog, and containers”

rsyslog becoming target for social engineering PRs? Lessons learned.

In the past days I noticed PR patterns that do not look right. This is a smell, not a verdict. The upside is real: rsyslog is interesting enough to attract attention. That is actually great news. Now we have the problem ourselves, and that is the moment to engineer the right guardrails without losing our welcoming tone. You need to be a target in order to gain sufficient experience to tackle that hard problem.

IT Security (Symbol Image: Rainer Gerhards via AI)
Continue reading “rsyslog becoming target for social engineering PRs? Lessons learned.”

Sluggish Responses – And How We Plan to Do Better

TL;DR

  • My responses to PRs and issues were sluggish, especially during the pandemic. I am sorry, and thank you for sticking with us.
  • We aim for reasonable, not instant, turnaround.
  • Expect a quick maintainer look at every PR within 3 business days.
  • Full review typically follows once CI is green and AI review items are addressed or explained.
  • We will not mass-close old issues. We are revisiting them with AI assist and closing for the right reasons.
  • We are formalizing labels and dashboards to make navigation easier. Details will follow in a short, separate post.
  • Suggestions are welcome.

I want to be very honest with you: my responses to pull requests and issues have been sluggish for quite some time. This affected the whole rsyslog project, because in the end it always comes back to the limited capacity of the maintainers – and most often, that means me.

We are working hard to change this. It will not mean ultra-fast turnaround times, but it will mean reasonable turnaround times. We have already made important steps, and AI will play a key role in improving this going forward. Still, this is work in progress, and I welcome your suggestions.

Continue reading “Sluggish Responses – And How We Plan to Do Better”

An old and possibly important text rediscovered…

Seventeen years old, raw “armchair philosophy” — but surprisingly close to what I still believe today.

While reflecting on my current work, I remembered a text I had written in April 2008 during a discussion with a friend in biology. It’s an unfinished “armchair philosophy” piece — raw, dense, and hard to read — but it still reflects many of my core beliefs about IT systems. I’m publishing it unchanged as an archival entry, because the foundations it sketches are still relevant today.

Continue reading “An old and possibly important text rediscovered…”

Why I’m Trying Rsyslog Channels on WhatsApp and Telegram

I’ve long had mixed feelings about messengers – especially WhatsApp—because of privacy concerns. At the same time, as a councilman in my village, WhatsApp is essentially unavoidable in Germany. Announcements, e.g. from Public bodies and personal conversations – much of the day-to-day information flow runs through it. So I use it in that local role and follow announcement channels from government institutions. It also the tool to go for one-on-one conversations with my fellow citizens.

Welcome/Subscription page of my Telegram rsyslog channel. (Screenshot: Rainer Gerhards)

(Side note: for genuinely private conversations with security-aware folks, I prefer Threema. I’m well aware of the privacy trade-offs.)

Continue reading “Why I’m Trying Rsyslog Channels on WhatsApp and Telegram”

When Humans and AIs Overthink: a “complex” rsyslog crash that wasn’t

I chased a rare crash in highly-threaded code. It popped up now and then; earlier fixes didn’t stick. I suspected an advanced concurrency issue. I also asked Gemini, Copilot/Codex, and Claude for help. They agreed with me: surely something subtle—epoll, re-queueing, ownership flags…

Human and AI thought bubbles full of tangled lines; a small check mark off to the side.
My AI use on images as inferior, as you can see here. I hope you like that fact ;-)

We were all wrong—and, importantly, I was wrong in the same way the AIs were. Their analyses reinforced my initial hypothesis. The fact that the static analyzer reported nothing reinforced it even more—after all, that’s “proven non-AI tech.” In hindsight, if I had thought earlier about the limits of these tools (AI and non-AI), I might have changed direction sooner—but I was also primed by experience: in this part of the codebase, bugs are almost always complex.

Continue reading “When Humans and AIs Overthink: a “complex” rsyslog crash that wasn’t”

Dogfooding the rsyslog Commit AI Assistant

I’ve been using AI to help with commit messages for a while now. Yesterday, in a discussion with co-workers, it became clear that this may not just be a convenience feature — it’s turning into a real time saver.

That was the background for creating the new rsyslog Commit AI Assistant. It directly addresses a problem we ourselves face in daily development. True to dogfooding, we now use it internally whenever we craft a commit message — myself included.

The “rsyslog commit assistant” in action. You can even see my typos ;-) (Screenshot: Rainer Gerhards, actual session)

Want to give it a try: use the rsyslog commit Assistant.

Continue reading “Dogfooding the rsyslog Commit AI Assistant”

The vision behind rsyslog’s AI-First strategy

In 2001, Wikipedia was launched, and its reception was… mixed, to say the least. Many dismissed it as unreliable compared to authoritative sources like the Encyclopaedia Britannica. Yet Wikipedia had something that Britannica never could: a scalable, living knowledge system, constantly updated and freely accessible. Just over a decade later, Britannica stopped printing books in 2012.

Once upon a time, this was my knowledge base. Search? Mostly fingers and sticky notes. (Picture: Rainer Gerhards, personal library)

Today, Wikipedia content is increasingly consumed through AI answers and search snippets, rather than by visiting the site itself. The information layer is shifting again, and this change is not limited to encyclopedias. It will affect how we build, document, and support software.

Continue reading “The vision behind rsyslog’s AI-First strategy”