1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Your Buildpack Only Checks bun.lockb. Bun Stopped Writing It in 2026.
Bun 1.2 quietly changed its default lockfile from bun.lockb to bun.lock, and it's already broken Bun detection on Railway, Cloudflare Pages, and Netlify. Here's the detection logic that survives the next lockfile change, and why 'build with Bun, run on Node' is the right default for existing projects.
Coolify's 6% Idle CPU Tax vs Dokploy's 0.8%: What Single-Daemon PaaS Resource Overhead Actually Costs at Fleet Scale
Coolify idles at roughly 6% CPU and 700MB RAM per box; Dokploy idles at 0.8% CPU and 350MB. Priced across a fleet, that gap crosses the cost of a fixed Cluster API control plane by the time you're running 17-65 boxes.
Daytona's $24M Compliance Bet: What a HIPAA/SOC 2 AI Sandbox Really Costs to Build Yourself
Daytona's $24M Series A prices out HIPAA/SOC 2 compliance for AI sandboxes — the real dollar-and-timeline cost of building that compliance yourself, and why a self-hosted platform already owns the harder half of the pitch for free.
DigitalOcean's Per-Second Billing Won't Save Your Always-On Fleet a Cent
DigitalOcean now bills Droplets by the second instead of the hour — but a 672-hour monthly cap means an always-on control-plane node pays the exact same bill either way, and it's still 5.5x a comparable Hetzner box.
Docker's CVE-2026-34040 Is the Second Time This AuthZ Bypass Shipped: A Padded HTTP Request Still Grants Host Access on Unpatched Engines Below 29.3.1
CVE-2026-34040 bypasses every Docker AuthZ plugin with one oversized HTTP request — the same underlying gap as 2024's CVE-2024-41110, patched twice and still exploitable below Engine 29.3.1. Here's the exact payload, why the first fix didn't hold, and what it means for a Cluster API fleet's patch discipline.
Dokploy Ships Four Buildpack Backends: What Buildpack Plurality Buys a Git-Push Platform Over Picking One
Dokploy runs four separate buildpack backends side by side. A concrete look at what that plurality costs in real bugs, which languages each one actually covers, and whether a self-hosted PaaS should copy the model or pick one.
Fly.io's July 9, 2026 Depot Builder Outage in IAD: What Renting a Shared Remote-Build Fleet Costs When the Region Itself Degrades
Fly.io's build step went down three times in five months because it isn't Fly's build step — it's Depot's. Here's the July 9 IAD outage timeline, the recurrence pattern behind it, and what renting a shared remote-build fleet actually costs when the vendor's region degrades.
Hetzner's GEX44 GPU Server at €184/Month: The Break-Even Utilization vs A10/L4 Rental — and the CAPH Catch
Hetzner's GEX44 GPU box runs €184/month flat. Here's the exact utilization percentage where it beats renting A10/L4 capacity from AWS or GCP by the hour — and the one hyperscaler rate it never beats at all.
Kamal 2.0 Runs HEY and Basecamp Without a Control Plane: The Overhead It Skips, and Where It Runs Out
Kamal 2 deploys HEY.com and Basecamp to bare metal over plain SSH, no control plane involved. Here's the exact resource overhead a Cluster API fleet pays that Kamal skips — and the point where Kamal runs out of road.