July 2026
502 posts · 2026 archive
- Semantic Kernel's Prompt-Injection RCE: The Agent-Tool Audit Every Deploy/Rollback MCP Server Needs
- Agentjacking: How a Fake Sentry Error Hijacked AI Coding Agents 85% of the Time
- Tailscale Bought a PAM Company and Repriced to Seats in One Quarter: What It Actually Costs to Stay on Headscale
- Vault Went BSL, OpenBao Forked It Back: Which One Should a Self-Hosted PaaS Wire In
- Wasmer Built a Full Node.js Runtime in Two Weeks With Codex — What Edge.js Actually Buys a PaaS Over Docker
- The 47-Day Certificate Era: TLS Automation Becomes Mandatory for Self-Hosted Infrastructure
- Agentic GitOps: Why Your Deploy Agent Should Open a Pull Request, Not Call the API Directly
- AI Sandbox Pricing at Scale: $7,200 vs $16,819 vs $24,491 vs $35,000 for 200 Sandboxes
- AWS Closed App Runner to New Customers on April 30 — and Proved the PaaS Layer Is the First Thing Even a Hyperscaler Cuts
- CAPD vs CAPH: One Cluster API, From Your Laptop to Real Hetzner Bare Metal
- Kubernetes Quietly Fixed a Years-Old cgroup v1-to-v2 CPU Priority Bug: What the January 2026 Formula Rewrite Means
- Your CI Runner Already Trusts an AI Agent: What Claude Code and Codex CLI's Non-Interactive Mode Doesn't Guard Against
- Cloudflare's 60-Minute Disposable Workers: The Zero-Signup Deploy Target AI Agents Actually Need
- Cluster API v1.12 In-Place Updates and Chained Upgrades: The End of Node-Replacement-Only Kubernetes Lifecycle
- Coolify's 58K Stars vs Dokploy's 35K: What Two Self-Hosted PaaS Growth Curves Actually Say
- Docker's MCP Gateway Caps Every Tool Call at 1 CPU / 2GB: The Container Security Model Your Deploy Bot Should Steal
- Dokploy's CVE-2026-27130: OS Command Injection via the appName Parameter in a Popular Self-Hosted PaaS, and What It Means to Trust a Deploy Tool With Root on Your Fleet
- E2B Joined the OpenAI Agents SDK. The Real Story Is How Many Times It's Had To.
- Envoy AI Gateway Hits v1.0: A CNCF Blueprint for Securing Your Own MCP Server
- Gateway API v1.5's ListenerSet Just Solved Multi-Tenant Custom Domains — Here's the RBAC Layout That Replaces Your Ingress Hacks
- GitHub Tried to Meter Self-Hosted CI Runners, Then Backed Off
- Hetzner Already Killed the datacenter Field — What a CAPH Fleet Must Check Before August 1
- The Hidden PaaS Tax Nobody Puts in the Pricing Table
- Ingress NGINX Is Officially Dead: The Gateway API Migration a Self-Hosted PaaS Can't Skip
- Kamal 2 Bet Against Kubernetes and Rails 8 Made It the Default: What SSH-Based Docker Deploy Gets Right (and Where It Runs Out of Room)
- Kubernetes 1.36's Pod-Level Resource Managers: The Sidecar Bin-Packing Math, After Hetzner's Price Hikes
- Kubernetes 1.35's Job managedBy Field Ends the Reconciliation Fight Over Agent-Triggered Batch Work
- Kubernetes 1.36's User Namespaces Go GA: The hostUsers: false Default Every Multi-Tenant PaaS Should Ship
- Kubero vs a Cluster-API PaaS: Two Kubernetes-Native Bets on "Heroku Without the Monthly Bill"
- Let's Encrypt's 6-Day Certificates Are GA: The Renewal Math Your PaaS's ACME Automation Needs to Survive It
- MCP Server Cards Won't Advertise Your Tools — Here's What They Actually Do
- MCP's Stateful Session Bottleneck: Why the 2026 Transport Roadmap Is Racing to Make Agent Servers Horizontally Scalable
- MCP Tasks Gets Retry Semantics and Expiry Policies: The 'Call Now, Fetch Later' Pattern for Deploys That Outlive an HTTP Timeout
- MCP Tool Schemas Are Eating 72% of Your Context Window: How to Design an Infrastructure MCP Server That Doesn't
- Ephemeral Preview Environments on Kubernetes: A Namespace-Per-PR Recipe for a Git-Push PaaS
- Netlify Killed the Seat Tax, Vercel Kept the Credits: Recomputing the 2026 Self-Hosting Breakeven
- Paketo Buildpacks Loses Its GCP Sponsor: What a Cloud Vendor Walking Away Means for Betting a Build Layer on the Open Standard
- PocketBase vs. a Cluster API Fleet: The Three Walls That Tell You When to Switch
- PostgreSQL 18's Async I/O, OAuth, and pg_upgrade --swap: What Your Operator Image Should Actually Turn On
- Preview Environments Are Table Stakes Now: What Dokploy, Railway, and Render's PR-Preview Features Mean for a Self-Hosted git-push PaaS Roadmap
- Railway's July Outage Was the Same Bug as February — And That's the Real Story
- Railway's 8-Hour Outage Was an Architecture Problem, Not a Bug
- Railway Killed Its Free Tier for a One-Time $5 Credit: What a Real Hobby App Costs on Railway vs a Hetzner Box
- Render's Buildpacks Aren't 75% Faster Than Dockerfiles — Here's What Its 2026 Changelog Actually Says
- Render's April 23, 2026 Repricing: Flat Fees Land, but Included Egress Drops From 100GB to 5GB
- The Self-Hosted GPU Breakeven Point: Why ~50M Tokens/Day Is Where Owning H100s Beats Renting Inference APIs
- Short-Lived Credentials for AI Agents on Kubernetes: Designing Out the Long-Lived-Secret Failure Mode
- How SNCF Keeps 200+ Kubernetes Clusters in Sync With Zero Drift — and Why the Same Loop Works on Three Hetzner Boxes
- Talos Linux Meets Cluster API: The Immutable-OS Alternative to Ubuntu+kubeadm
- Vercel's Active CPU Billing Saves 93% on a Real AI Agent — Here's the Exact Math
Showing 451–500 of 502 posts