1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Ceph Tentacle's FastEC vs MinIO's Maintenance Mode: What Self-Hosting Block and Object Storage Looks Like on a Cluster-API Fleet in 2026
Ceph Tentacle's FastEC cuts erasure-coding overhead for small block I/O by 2-3x. Worked out on real Hetzner-class hardware against 3x-replicated Longhorn, plus the January 2026 production incident that shows exactly how not to enable it.
Docker Compose's models: Key Has Been in the Official Spec Since June 2025 — What That Means for a Compose-to-Cluster-API Build Step
Docker Compose's models: key for defining AI models, agents, and MCP tools has quietly been part of the vendor-neutral Compose Specification since June 2025 — here's the exact YAML, and what it means for a git-push PaaS's build pipeline.
Dokploy Passed CapRover's GitHub Stars in Two Years, Not Nine
CapRover took nearly nine years to reach 15,109 GitHub stars. Dokploy passed that number in about two. The GitHub API data, and the Docker Compose gap behind it, explain why.
The Deploy That Pointed at Nothing: Firetiger's CI Race Condition and the One Check That Would Have Stopped It
A canceled CI build fooled Firetiger's deploy pipeline into shipping a container image ID that was never built, triggering an 8-hour ingest outage. Here's the exact failure chain, and the one registry check that would have caught it.
CVE-2026-50566: How Namespace-Scoped RBAC Became a 9.9 Node Compromise in Fission
A routine namespace-scoped RBAC grant let a Fission tenant escalate to node compromise — why RBAC was never a sandbox boundary, and what it means for platforms scheduling tenant code on shared nodes.
Gateway API on kind: The Local Reproduction Recipe for Ingress Bugs You Can't Debug on Bare Metal
The stock kubernetes.io recipe for running Gateway API on kind gets you one working HTTPRoute. Here's how to extend it to reproduce the three tenant ingress bugs that actually page a self-hosted PaaS's on-call, before they hit bare metal.
GitHub Copilot's Worktree Isolation Is Not a Sandbox — Why That Matters for Deploy-Authority Agents
GitHub's Copilot app isolates parallel agent sessions with git worktrees, not sandboxes — fine for code edits, but not enough for an MCP server that can deploy and rollback real infrastructure. Here's the concrete difference and what it means for agent-operated PaaS platforms.
Do You Still Need kubectl for Cluster API Fleet Management? Headlamp's New Plugin Says Mostly No
Kubernetes retired its Dashboard and pointed operators at Headlamp's new Cluster API plugin — here's exactly what it replaces, what still needs kubectl and GitOps, and why bex should adopt it instead of building a bespoke fleet view.
Hetzner's GEX131 GPU Server: What €889/Month for a Blackwell RTX PRO 6000 Buys Against AWS's g5.xlarge
Hetzner's GEX131 costs more per month than AWS's g5.xlarge — but a third as much per gigabyte of VRAM. Here's the worked cost-per-GB math across on-demand, spot, and reserved AWS pricing, plus what 96GB of VRAM actually unlocks that 24GB can't.