Dora Noda
Software Engineer
Dora Noda is a Software Engineer writing about Web3 infrastructure, blockchain networks, and self-hosting.
3404 posts · View all authors
Confidential Containers Reaches CNCF Incubation: What TEE-Attested Secrets Release Actually Costs a Self-Hosted PaaS
Confidential Containers just reached CNCF incubation, promising tenant code even the platform operator can't read. Here's what the TEE hardware, the Trustee attestation service, and the per-pod overhead actually cost to run on a self-hosted Hetzner fleet.
GitHub Copilot's Coding Agent Now Runs on Self-Hosted Runners — But You Have to Turn Off Its Firewall to Get There
GitHub's coding agent can now run on your own Actions Runner Controller fleet to reach internal registries and on-prem services — but doing so requires disabling its managed firewall entirely. Here's what changes, and the three ARC misconfigurations that leave the gap unguarded.
The Docker Desktop License Threshold Nobody Rechecks: What 250 Employees or $10M Revenue Actually Costs a Team
Docker Desktop stops being free the moment a company crosses 250 employees or $10M in revenue — whichever it hits first. For a 30-developer team, that's $5,400 to $8,640 a year, plus a three-year audit lookback most finance teams never see coming.
DockLog Ships One Image for Docker and Kubernetes Logs: What It Buys a Cluster API Fleet Over kubectl logs -f
DockLog puts Docker and Kubernetes log tailing behind one container and one RUNTIME_MODE toggle — here's exactly what that buys an operator over kubectl logs -f loops, where its single-cluster scope stops short of a real fleet, and when a growing fleet actually needs Loki instead.
Dokploy Is Apache 2.0 Again — But SSO, Audit Logs, and RBAC Now Live Behind a New Source-Available License
Dokploy's January 2026 license split moved SSO, audit logs, RBAC, and white-labeling behind a new source-available license. We pulled the actual GitHub tree to see exactly what changed and what didn't.
Encore.dev Promises No Terraform — Until You Self-Host
Encore.dev's pitch is that declaring a database in your app code replaces writing Terraform. That's true — on Encore Cloud. Self-host the same app and you're back to provisioning infrastructure by hand and handing Encore a config file. A worked look at where the automation actually stops, and what it costs when it doesn't.
Preventing etcd Zombies on Upgrade to 3.6: A Cluster API Operator's Pre-Flight Checklist
Kubeadm still pins etcd to v3.5.24-0 for Kubernetes 1.31 through 1.33 — one patch below the v3.5.26 floor etcd's maintainers say you need before v3.6. Here's why Cluster API's machine-replacement upgrade model skips that safety margin entirely, and the pre-flight checklist to run before you cross the boundary.
Firebase Studio Is Shutting Down. Here's What 'Export My Code' Actually Means Across Every Vibe-Coding Platform
Firebase Studio dies for good on March 22, 2027. Its own migration docs reveal exactly what exports cleanly and what doesn't — and the same checklist exposes how much of Bolt.new, Lovable, Replit, and Base44's output is actually yours to keep.
Fly.io's Managed Postgres Costs $38/Month Before You've Added the App
Fly.io's Managed Postgres starts at $38/month plus $0.28/GB storage — and that's before the app talking to it is billed. A line-by-line worked comparison against running Postgres on the same Hetzner box already hosting the app.