NYAKUNDI EMMANUEL

Systems programming, observability, performance, concurrency primitives, and correctness under contention.

Currently contributing to production infrastructure used by millions of developers.

Open Source Contributions

January 2025 - Present | gitlab-runner

Page 5 Global 479 Points 3 Merged MRs

Merged:

helpers/retry: interrupt backoff sleep on context cancellation Fixed retry infrastructure to respect context cancellation, improving shutdown responsiveness
network: stop retry backoff timer on context cancellation Eliminated timer leaks in network layer by replacing time.After with stoppable timers
runner_wrapper: fix backoff retry context cancellation handling Corrected context error handling and timer lifecycle

Technical Reviews:

Kubernetes Secrets Security Review Identified 7 critical issues: feature flag bypass, RBAC gaps, secret leaks, missing tests. Provided fixes adopted by maintainers.

February 2025 | PR #4514

100% Coverage ReDoS Prevention

Added length validation (253 chars) preventing ReDoS attacks on controller names
Achieved 100% test coverage with 20 test cases per API version (v1, v1beta1)
Aligned with Kubernetes DNS subdomain limits and best practices

Coming soon — Subscribe to stay updated

Video 1: Coming Soon

Video 2: Coming Soon

I Deleted My Clever Code and the Database Got Better Building a bulletproof Bitcask-inspired storage engine in Go — and why deleting a lock-free ring buffer made it more correct

Controlled experiment showing when cache-line sharing is hidden and when coherence latency dominates

Bounded Work Queue using Mutex + Condition Variables From-scratch implementation exploring backpressure, spurious wakeups, and shutdown semantics
Measuring pread() Latency and Page Cache Effects Experiment-driven analysis of syscall latency and why naive benchmarks lie
The Weird Heuristics Behind Linux TCP's RACK Loss Detection (and When It Lies) Tracing how min_rtt, srtt caps, and reordering window multipliers conspire to retransmit packets the receiver already holds
What I Learned by Removing All Container Abstractions Deep dive into PID 1 semantics, signal delivery, orphan reaping, and kernel contracts

sheriffDB Bitcask-inspired key-value storage engine in Go. Single file, 488 LOC, stdlib only. Append-only log with CRC32 crash recovery, tombstone deletes, lockfile safety, hint-file restarts, and log compaction
procjail Minimal process jail in Go implementing PID namespaces, PID 1 responsibilities, signal forwarding, and graceful shutdown — without container tooling
syslat Programs measuring syscall latency and page cache behavior. Focus on methodology and understanding kernel behavior
false-sharing 2×2 microbenchmark matrix demonstrating when false sharing is hidden vs. when cache coherence latency dominates
mutex_condvar Bounded work queue in C using pthread mutexes and condition variables. Built to study invariants and correctness under contention