Docker Hub's Unauthenticated Pull Limits Are Still 100/6hr: When a Self-Hosted Registry Actually Pays Off
Docker Hub still caps unauthenticated pulls at 100/6hr and free accounts at 200/6hr in 2026. A concrete threshold for when a CI fleet should authenticate, pay for Pro, add a pull-through cache, or run its own registry.
E2B Grew 375x to 15M Sandbox Runs a Month. Here's What the Sub-500ms Bar Actually Costs to Clear Yourself
E2B's sandbox volume grew 375x in a year, setting a sub-500ms boot bar for AI agents. Here's what that latency actually decomposes into, and how a Kubernetes-native fleet on owned hardware clears it with Kata Containers instead of rebuilding E2B's control plane.
Your Git-Push PaaS Assumes GitHub. Here's What Wiring It to Forgejo + Woodpecker Actually Takes
A git-push PaaS built GitHub-first assumes a webhook, a payload shape, and a status write-back that don't just carry over to a self-hosted Forgejo + Woodpecker CI stack. Here's the concrete four-piece build-out — webhook receiver, deploy trigger, commit-status write-back, OAuth app — that makes it a first-class integration instead of a race condition.
GitHub Wobbled Three Separate Times in Eight Days: What Owning No Runner Capacity Costs
Three unrelated GitHub subsystems failed independently within eight days in July 2026. A concrete accounting of what broke, why that's a different risk shape than one outage repeating, and what actually changes when the build step and deploy target run on owned infrastructure instead.
Kubernetes Turned Off Its Own StatefulSet Speedup: The Real Status of maxUnavailable in 1.35/1.36, and the Quorum Math for 1.37
Kubernetes 1.35 shipped StatefulSet maxUnavailable as beta-and-on-by-default — then a rollout-deadlock bug got it flipped back off within the same release cycle. Here's the verified current status, plus the quorum math for when it's safe to raise it.
MCP's Stateless Core Just Shipped: What a Deploy-From-Chat MCP Server Gets to Delete
MCP dropped protocol-level sessions on July 28, 2026 — deleting the sticky routing and shared session store a self-hosted deploy/rollback MCP server used to need, and adding a formal lifecycle policy worth pinning to.
Nutanix Ships NKP Metal: A Hyperconverged Giant Bets on Bare-Metal Kubernetes
Nutanix, a $2.8B-revenue HCI vendor built on its own hypervisor, just shipped bare-metal Kubernetes as a flagship product. Here's what NKP Metal actually costs, what it doesn't replace, and why it's independent validation for the Cluster-API thesis.
AMD SEV-SNP Comes to Bare Metal: What Hardware Memory Encryption Buys a Multi-Tenant Fleet That Namespaces Never Could
OVHcloud's Scale 2026 bare metal and AWS Dedicated Hosts both shipped AMD SEV-SNP in 2026, at very different prices. Here's what hardware memory encryption actually closes that container namespaces can't, what it costs in dollars and throughput, and who genuinely needs it.
The 2026 'PaaS-First' Reversal: What Hacker News Gets Wrong About Owning Your Kubernetes Cluster
Hacker News sentiment flipped from 'you don't need Kubernetes' in 2024 to pitching Kubernetes-without-a-platform-team products in 2026 — but the PaaS-first argument conflates hand-operated Kubernetes with vendor lock-in PaaS, missing the option that actually removes the toil: Cluster API-based ownership.