Coolify Fixed 11 Critical CVEs in January. The Same Root Cause Struck Again in July
Coolify patched 11 critical CVEs at CVSS 9.4-10.0 in January 2026, then shipped a fix for the same root-cause bug class in July. Here's what the repeat says about single-daemon PaaS architecture versus RBAC-scoped, Kubernetes-native control planes.
Coolify, Dokploy, and CapRover Hit a Docker Swarm Ceiling
Coolify, Dokploy, and CapRover get a solo developer to a running app fast — but a side-by-side of node failure recovery, storage, and tenant isolation shows exactly where their shared Docker Swarm architecture caps out, and when a Cluster API-provisioned fleet is worth the switch.
Kubernetes Can Checkpoint Your Containers Now — It Still Can't Restore Them
Kubernetes can freeze a running container to disk today. It cannot restore one natively. A capability matrix, the GPU and security gaps behind it, and what sandbox vendors built instead while they waited.
Crossplane's API-First Infrastructure Bet: What Agent-Operated Infra via Declarative CRDs Gets Right That a REST Deploy API Doesn't
CNCF's case for Crossplane says AI agents operate better against Kubernetes-style CRDs than a REST deploy API. Here's the mechanism-by-mechanism reason why, what the tradeoff actually costs, and what a Render-compatible API should borrow from it.
Daytona's Customer-Managed Compute: What 'Bring Your Own Hetzner Account' Actually Costs and Controls
Daytona lets you point its control plane at your own cloud account instead of theirs. Here's what that customer-managed compute tier still costs, still controls, and where it's a genuine middle ground versus renting trust.
Dear Friend, You Have Built a Kubernetes: Why HN Keeps Resurfacing This Essay
A 2024 satirical essay about hand-rolling a worse Kubernetes hit Hacker News again in 2026. Lined up against a real 2025 postmortem, the argument turns out to be a sharper pitch for owning Cluster API than any feature list — with the honest caveat about when it doesn't apply.
Deno Deploy Classic Shuts Down July 20, 2026 — and Takes Subhosting v1 With It
Deploy Classic and Subhosting's v1 API both die July 20, 2026 — the exact migration checklist, what Subhosting's isolation model actually took to build, and why letting a tenant resell tenants is a scope-creep trap for most git-push PaaS platforms.
Docker Hub's Pro Tier Jumped 80%, Team 67%: The Break-Even Math for Running Your Own Registry
Docker Hub's Pro and Team subscriptions jumped 80% and 67% in a repricing still in effect today. A line-by-line recompute of what that costs a 5- and 20-person team against running Harbor on a single owned Hetzner box, including the operational costs a "just self-host it" pitch usually skips.
The 11,000-Hour Myth: E2B's Real Self-Hosted Break-Even on a Hetzner Cluster-API Fleet
The widely-cited 11,000-sandbox-hour break-even for self-hosting E2B-style sandboxes turns out to compare an H100 GPU bill against a CPU-only rate. Here's the real number, recomputed against Hetzner Cluster-API pricing.