685 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
Coinbase's Rollback Tool Broke Along With the Deploy It Was Supposed to Fix
A 50-minute Coinbase outage on July 14, 2026 got worse because the tool engineers needed to roll back the bad deploy was itself unreachable through the gateway the deploy had just broken. Here's the mechanism, and a concrete audit for whether a self-hosted PaaS's own control plane could hit the same trap.
Confidential Containers Reaches CNCF Incubation: What TEE-Attested Secrets Release Actually Costs a Self-Hosted PaaS
Confidential Containers just reached CNCF incubation, promising tenant code even the platform operator can't read. Here's what the TEE hardware, the Trustee attestation service, and the per-pod overhead actually cost to run on a self-hosted Hetzner fleet.
GitHub Copilot's Coding Agent Now Runs on Self-Hosted Runners — But You Have to Turn Off Its Firewall to Get There
GitHub's coding agent can now run on your own Actions Runner Controller fleet to reach internal registries and on-prem services — but doing so requires disabling its managed firewall entirely. Here's what changes, and the three ARC misconfigurations that leave the gap unguarded.
The Docker Desktop License Threshold Nobody Rechecks: What 250 Employees or $10M Revenue Actually Costs a Team
Docker Desktop stops being free the moment a company crosses 250 employees or $10M in revenue — whichever it hits first. For a 30-developer team, that's $5,400 to $8,640 a year, plus a three-year audit lookback most finance teams never see coming.
DockLog Ships One Image for Docker and Kubernetes Logs: What It Buys a Cluster API Fleet Over kubectl logs -f
DockLog puts Docker and Kubernetes log tailing behind one container and one RUNTIME_MODE toggle — here's exactly what that buys an operator over kubectl logs -f loops, where its single-cluster scope stops short of a real fleet, and when a growing fleet actually needs Loki instead.
Dokploy Is Apache 2.0 Again — But SSO, Audit Logs, and RBAC Now Live Behind a New Source-Available License
Dokploy's January 2026 license split moved SSO, audit logs, RBAC, and white-labeling behind a new source-available license. We pulled the actual GitHub tree to see exactly what changed and what didn't.
Encore.dev Promises No Terraform — Until You Self-Host
Encore.dev's pitch is that declaring a database in your app code replaces writing Terraform. That's true — on Encore Cloud. Self-host the same app and you're back to provisioning infrastructure by hand and handing Encore a config file. A worked look at where the automation actually stops, and what it costs when it doesn't.
Preventing etcd Zombies on Upgrade to 3.6: A Cluster API Operator's Pre-Flight Checklist
Kubeadm still pins etcd to v3.5.24-0 for Kubernetes 1.31 through 1.33 — one patch below the v3.5.26 floor etcd's maintainers say you need before v3.6. Here's why Cluster API's machine-replacement upgrade model skips that safety margin entirely, and the pre-flight checklist to run before you cross the boundary.
Firebase Studio Is Shutting Down. Here's What 'Export My Code' Actually Means Across Every Vibe-Coding Platform
Firebase Studio dies for good on March 22, 2027. Its own migration docs reveal exactly what exports cleanly and what doesn't — and the same checklist exposes how much of Bolt.new, Lovable, Replit, and Base44's output is actually yours to keep.