Dora Noda
Software Engineer
2331 posts · View all authors
containerd's June 2026 CRI Advisory: Three Ways to Escape a Shared Node That RuntimeClass Can't Stop
AWS's June 2026 bulletin disclosed five containerd CRI plugin CVEs, and patching the daemon — not picking gVisor or Kata for your RuntimeClass — is the only real fix. Here's what each bug requires and what a shared-node fleet needs to check this week.
Convex's FSL License Bans Building a Competitor: What 'Open, Except to Compete With Us' Actually Costs You
Convex's backend is source-available under the Functional Source License — free to self-host, but banned from powering a competing hosted product for two years. Here's what that non-compete clause actually forecloses, concretely, versus a plain Apache-2.0 license.
Coolify Shipped an Audit Log. It Still Wouldn't Survive a SOC 2 Review.
Coolify v4.1 shipped the first structured audit log among self-hosted PaaS platforms — but it only covers API mutations. Here's the gap against a real SOC 2 review, and the checklist a compliance-ready deploy API actually needs.
Coolify, Dokku, and CapRover Solve Git-Push Deploys on One Box — Here's Exactly Where That Wall Is
Coolify, Dokku, and CapRover all run one Docker daemon as the control plane, build runner, and runtime. Here are the actual RAM, CPU-during-deploy, and reboot-failure numbers that mark where that single box stops working, and what a Cluster API fleet does differently.
Kubernetes Promised a CSI for Buckets in 2022. It's Still Pre-Alpha Four Years Later
COSI, Kubernetes' answer to 'CSI for buckets,' targeted beta by Kubernetes 1.32 in December 2024. It's mid-2026 and the project is still pre-alpha. Here's the dated timeline, what hosted PaaS platforms shipped instead, and what a self-hosted PaaS should build for tenant object storage right now.
Daytona vs E2B for Self-Hosted AI Sandboxes: The Helm Chart Doesn't Do What You Think
Daytona's Helm chart looks like the easy self-hosting path for AI code sandboxes, but its own README shows the control plane never leaves Daytona's cloud. Here's what standing up Daytona and E2B actually requires on a Cluster API–managed fleet.
Devpush's No-Dockerfile Bet: What a Curl-Pipe Install Buys a Solo Python Dev, and Where It Runs Out
Devpush skips Dockerfiles entirely and installs with a curl-pipe-to-bash script on one box. A concrete look at what that buys a solo Python or Node developer's time-to-first-deploy, and the specific points — language support, background workers, a second machine — where the bet runs out.
DX's 13-Minutes-Per-Point Number: What a 40,000-Developer Panel Actually Proves About Golden-Path ROI
DX's headline claim is that each one-point DXI gain saves 13 minutes a developer a week — a number from a 40,000-developer survey panel, not a stopwatch. Here's what it actually proves, what it can't, and the instrumented time-to-first-deploy metric a self-hosted platform can measure instead.
Elestio's 400+ App Catalog Passes Coolify's: Why Catalog Size Is the Wrong Way to Rank a Self-Hosted PaaS
Elestio now leads the self-hosted PaaS category with 400+ one-click apps, ahead of CapRover, Coolify, PikaPods, and Cloudron. The numbers are real — but they measure a different product than a git-push PaaS builds. Here's the actual table, what catalog size hides, and what a Cluster-API platform should borrow instead of chasing the count.