Automation, deployment, infrastructure and running your own stack.
21 articlesDistroless images are booming, but stripping the shell hides a real CVE problem. Here's the data behind the tradeoff — and what to do about it.
kube-proxy's rule-chain era is closing. Kubernetes is moving to nftables and eBPF data planes — and the schedule is already written.
Kubernetes v1.37 "Garhwal" graduates the metrics API, enables HPA scale-to-zero, ships a rootless kubelet, and starts deprecating ipvs and cgroup v1.
Podman is becoming the default container engine in 2026: daemonless, rootless by default, Docker-compatible, and supervised by systemd.
Immich is the self-hosted, open-source Google Photos alternative - mobile background backup, local ML face recognition and search, all on hardware you own.
How one config file turned a security vendor into the attacker's effect, and the dispatch lessons for every operation.
