September 2026
955 posts · 2026 archive
- The EU's 24-Hour Vulnerability Clock Is Now Law: What the Cyber Resilience Act Means for a Self-Hosted PaaS Sold Commercially
- The $5 Free Credit Is Gone: What It Really Costs to Evaluate a PaaS in 2026
- Fly.io Killed GPUs on August 1: Where the Workloads Go and What They Cost Now
- Gateway API v1.5 Moves Six Features to Stable: Which Ones Your Git-Push PaaS Should Adopt First
- AI-Assisted Commits Leak Secrets at Twice the Baseline Rate — Why Your PaaS Should Scan Every Push
- Hardening an Infrastructure MCP Server: TLS, Scoped Credentials, and Rate Limits Before an Agent Touches Production
- Hetzner Nearly Tripled Bare-Metal Prices: What the AX102's €124-to-€454 Jump Means for Self-Hosting Math
- Kamal vs Coolify: How Much Platform Should Actually Run on Your Server?
- kops Is Tracking Kubernetes 1.37 in 2026 — and Still Proves Why Cluster API Won the Heterogeneous Fleet
- KubeCon Japan 2026 Sold Out Again: What It Signals for a Hetzner-Only Fleet's APAC Roadmap
- MCP Retires Dynamic Client Registration: The OAuth Migration Your Self-Hosted Server Has Twelve Months to Finish
- Deploy Agents That Wait: Building a Stateless Rollout-and-Approval Agent on MCP Tasks and Multi Round-Trip Requests
- One Missing Middleware Call, 2,689 Exposed Servers: What nginx-ui's MCPwn (CVE-2026-33032) Teaches Anyone Shipping an MCP Server
- Preview Environments Are a Cost Problem Before They're a Feature: The 50-PR Math on Auto-Sleep and Auto-Destroy
- Railpack Is Railway's Default Builder: What the Nixpacks-to-BuildKit Rewrite Teaches Self-Hosted PaaS Builders
- Railway's May 2026 GCP Blackout: What an 8-Hour Outage Reveals About a Control Plane That Never Actually Left Google Cloud
- Railway Retired Nixpacks for Railpack: What Changed in the Zero-Config Build Path
- Render Cut Median Builds 40% With Faster Hardware: Reproducing 38s-to-21s on Owned Hetzner Build Nodes
- Seven Months to Self-Host an AI Stack That Was Supposed to Take a Weekend: What OpenMake's Post-Mortem Bills Against a PaaS
- SmolVM Packs a MicroVM Into a Single Binary That Boots in Under 200ms — What It Changes for a Firecracker-Only Agent Sandbox
- Tailscale Went Seat-Based: What Self-Hosting Your Admin VPN With NetBird or Headscale Actually Costs
- TurboFieldfare Fits a 26B MoE Model in 2GB of RAM: What SSD-Streamed Experts Mean for Your Cheapest Inference Node
- Your .com Renews at $10.97 in November: The Tenant Domain Bill Your PaaS Can't Automate Away
- Whole GPU or Nothing Is Over: Wiring DRA GPU Scheduling on a Bare-Metal Cluster API Fleet
- Toward a World Where Builds Don't Exist: What Railway's VM-Powered Thesis Gives Up in Provenance
- From $7,000 on AWS to $780 on Hetzner: An Honest Accounting of an 89% Cost Cut
- Buildpacks RFC 329 Would Make `web_worker` an Illegal Process Type — and That's the Point
- cert-manager vs Gardener vs certctl: What Tenant TLS Really Costs at 10, 100, and 1,000 Custom Domains
- The 2026 CI Runner Market in One Table: When a $50 Hetzner Box Beats Every Meter
- Cloudflare Deprecated McpAgent: What a Stateless MCP Handler Buys (and Costs) a Deploy-From-Chat Server
- Daytona's Repo Is Frozen — Will the Fork Survive? What Three Open-Source Relicenses Teach About Betting on Nightona
- Firecracker Is the Easy 5%: What Self-Hosting an E2B-Style Agent Sandbox Really Operates
- Ephemeral Preview Environments Without a SaaS Bill: Namespace-per-PR on Owned Hardware
- Falco's Prempti Is a Policy Layer for AI Coding Agents, Not Kernel Security: What It Catches and Misses
- Talos vs Flatcar in 2026: Picking the Immutable OS Under Your CAPH Fleet
- Flatcar Brings Omaha-Style Auto-Updates Into CNCF Custody: What A-B Partition Rollouts With Automatic Reboots Mean for Unattended Node Updates Across a Hetzner Fleet
- Flox's $25M Bet That Reproducible Environments Are Infrastructure: What It Means for the Git-Push Build Contract
- Gateway API v1.6: One Ingress Stack for HTTP, TCP, and UDP — No Second Load Balancer
- Headlamp's Plugin Sprint Gave Kubeflow, Volcano, and Knative a GUI: Is It Ready to Be Your Fleet's Operator Console?
- Render Never Ran Your Heroku Buildpacks — Here's What Rebuilding That Compatibility Costs With Paketo vs Nixpacks
- Heroku Dyno to Hetzner CX in 2026: Real Bill Before and After With Egress Math
- Heroku's Dead, Three Bills Remain: Railway vs Render vs Fly.io vs a Flat-Rate Hetzner Box
- Hetzner Deleted the Datacenter Field: Why Your Prometheus Labels Went Quietly Empty (and the 30-Second Check)
- Humans Missed 1 in 3 Threats Approving AI Agent Commands: What 409,000 Decisions Say About Human-in-the-Loop Deploy Guardrails
- Ingress-NGINX Is Dead. Gateway API v1.5 Is What You Migrate To — and It Finally Covers the Gaps
- k0rdent Turns One: What a Year of Shipping a Cluster API Fleet Orchestrator Proves About Not Building Your Platform From Scratch
- Kubernetes 1.36 Teaches Controllers to Distrust Their Own Cache: Why a Skipped Sync Beats a Wrong Reconcile
- TLS for a Bare IP: What Let's Encrypt's Free IP-Address Certificates Change for Self-Hosted Deploys
- Lint the Dockerfile Before You Build It: What hadolint, dockle, and Docker Scout Catch That a Green Build Never Will
- 15 Clean Releases, Then One Exfiltration Line: Lessons from the First Malicious MCP Server in the Wild
Showing 601–650 of 955 posts