1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
The Buildpack Escape Hatch: Why 'No Dockerfile' Breaks for About 1 in 5 Repos
Buildpack pitches promise you'll never write a Dockerfile — until the detect phase rejects your repo with no editable file to fix. A worked estimate of how often that happens, and the three-tier escape hatch a git-push platform should ship instead of just falling back to raw Dockerfiles.
Buildpacks vs Dockerfiles for a Git-Push PaaS: The Real Build-Time, Image-Size, and Leaked-Detail Numbers
Buildpacks promise 'no Dockerfile needed,' Dockerfiles promise full control. A real, sourced comparison of build time, image size, and how much implementation detail each one pushes back onto the developer.
Cloudflare D1's Per-Row Meter Turned 765,000 Rows Into a $134 Bill: What a 10GB-Per-Database Cap Costs a Bundled PaaS Database
A published $134 Cloudflare D1 bill — 95% of it a single line item of 127 billion metered row reads from a missing index — is a concrete look at what per-row database billing and a 10GB-per-database cap actually cost, against a self-hosted SQLite-plus-Litestream setup where a bad query is a latency problem, not an invoice line.
CVE-2026-18381: When Your Operator's CRD Field Becomes a Token Exfiltration Bootstrap
A user-editable upload URL in a Red Hat OpenShift operator let anyone with CR edit access steal its service-account token — no exploit needed, just a redirect. Here's the audit checklist for finding the same bug shape in your own operators.
Show HN's Cygnus: What a Serverless-Runtime Framing Actually Changes (and What It Doesn't) Versus a Container-Per-App PaaS
Cygnus revives an idle app from zero in about 30 milliseconds using kernel-sandboxed 'cages' instead of containers. Here's exactly what that architecture buys over Coolify and Dokploy's always-on containers — and why it still hits the same one-box ceiling the rest of the category has.
Kubernetes 1.36's Declarative Validation Goes GA: Which Webhook a Self-Hosted Cluster API Fleet Can Actually Delete — and Which One It Can't
Kubernetes 1.36's Declarative Validation only touches built-in types, not CRDs — the webhook a Cluster API fleet can actually delete graduated two releases earlier under ValidatingAdmissionPolicy. Here's the exact boundary between the three mechanisms, and the stateful checks none of them can replace.
Docker Hub's Unauthenticated Pull Limits Are Still 100/6hr: When a Self-Hosted Registry Actually Pays Off
Docker Hub still caps unauthenticated pulls at 100/6hr and free accounts at 200/6hr in 2026. A concrete threshold for when a CI fleet should authenticate, pay for Pro, add a pull-through cache, or run its own registry.
E2B Grew 375x to 15M Sandbox Runs a Month. Here's What the Sub-500ms Bar Actually Costs to Clear Yourself
E2B's sandbox volume grew 375x in a year, setting a sub-500ms boot bar for AI agents. Here's what that latency actually decomposes into, and how a Kubernetes-native fleet on owned hardware clears it with Kata Containers instead of rebuilding E2B's control plane.
Your Git-Push PaaS Assumes GitHub. Here's What Wiring It to Forgejo + Woodpecker Actually Takes
A git-push PaaS built GitHub-first assumes a webhook, a payload shape, and a status write-back that don't just carry over to a self-hosted Forgejo + Woodpecker CI stack. Here's the concrete four-piece build-out — webhook receiver, deploy trigger, commit-status write-back, OAuth app — that makes it a first-class integration instead of a race condition.