Dora Noda
Software Engineer
2304 posts · View all authors
Docker Hub's Unauthenticated Pull Limits Are Still 100/6hr: When a Self-Hosted Registry Actually Pays Off
Docker Hub still caps unauthenticated pulls at 100/6hr and free accounts at 200/6hr in 2026. A concrete threshold for when a CI fleet should authenticate, pay for Pro, add a pull-through cache, or run its own registry.
E2B Grew 375x to 15M Sandbox Runs a Month. Here's What the Sub-500ms Bar Actually Costs to Clear Yourself
E2B's sandbox volume grew 375x in a year, setting a sub-500ms boot bar for AI agents. Here's what that latency actually decomposes into, and how a Kubernetes-native fleet on owned hardware clears it with Kata Containers instead of rebuilding E2B's control plane.
Your Git-Push PaaS Assumes GitHub. Here's What Wiring It to Forgejo + Woodpecker Actually Takes
A git-push PaaS built GitHub-first assumes a webhook, a payload shape, and a status write-back that don't just carry over to a self-hosted Forgejo + Woodpecker CI stack. Here's the concrete four-piece build-out — webhook receiver, deploy trigger, commit-status write-back, OAuth app — that makes it a first-class integration instead of a race condition.
GitHub Wobbled Three Separate Times in Eight Days: What Owning No Runner Capacity Costs
Three unrelated GitHub subsystems failed independently within eight days in July 2026. A concrete accounting of what broke, why that's a different risk shape than one outage repeating, and what actually changes when the build step and deploy target run on owned infrastructure instead.
Ingress-NGINX Retired in March 2026 — Here's Exactly What Ingress2Gateway Migrates, and What It Doesn't
Ingress-NGINX officially retired in March 2026. Here's the annotation-by-annotation breakdown of what Ingress2Gateway migrates cleanly to Gateway API, what it can't touch, and why the gaps are riskier for a multi-tenant fleet than a single app.
Kubernetes Turned Off Its Own StatefulSet Speedup: The Real Status of maxUnavailable in 1.35/1.36, and the Quorum Math for 1.37
Kubernetes 1.35 shipped StatefulSet maxUnavailable as beta-and-on-by-default — then a rollout-deadlock bug got it flipped back off within the same release cycle. Here's the verified current status, plus the quorum math for when it's safe to raise it.
MCP Just Passed 22,000 Servers. Almost None of Them Can Deploy Anything.
MCP has 22,000+ servers and 97M monthly downloads, but almost all of them are read-only lookups. Here's what idempotent deploys, rollback, and audit logging actually require from the ones that aren't.
MCP's Stateless Core Just Shipped: What a Deploy-From-Chat MCP Server Gets to Delete
MCP's biggest spec rewrite since launch went final on July 28, 2026, killing the session model a deploy/rollback MCP server used to need. A concrete before/after of what infrastructure gets deleted and what still has to run.
MCP's Stateless Core Just Shipped: What a Deploy-From-Chat MCP Server Gets to Delete
MCP dropped protocol-level sessions on July 28, 2026 — deleting the sticky routing and shared session store a self-hosted deploy/rollback MCP server used to need, and adding a formal lifecycle policy worth pinning to.