1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
Cloudflare D1's Per-Row Meter Turned 765,000 Rows Into a $134 Bill: What a 10GB-Per-Database Cap Costs a Bundled PaaS Database
A published $134 Cloudflare D1 bill — 95% of it a single line item of 127 billion metered row reads from a missing index — is a concrete look at what per-row database billing and a 10GB-per-database cap actually cost, against a self-hosted SQLite-plus-Litestream setup where a bad query is a latency problem, not an invoice line.
CVE-2026-18381: When Your Operator's CRD Field Becomes a Token Exfiltration Bootstrap
A user-editable upload URL in a Red Hat OpenShift operator let anyone with CR edit access steal its service-account token — no exploit needed, just a redirect. Here's the audit checklist for finding the same bug shape in your own operators.
Show HN's Cygnus: What a Serverless-Runtime Framing Actually Changes (and What It Doesn't) Versus a Container-Per-App PaaS
Cygnus revives an idle app from zero in about 30 milliseconds using kernel-sandboxed 'cages' instead of containers. Here's exactly what that architecture buys over Coolify and Dokploy's always-on containers — and why it still hits the same one-box ceiling the rest of the category has.
Kubernetes 1.36's Declarative Validation Goes GA: Which Webhook a Self-Hosted Cluster API Fleet Can Actually Delete — and Which One It Can't
Kubernetes 1.36's Declarative Validation only touches built-in types, not CRDs — the webhook a Cluster API fleet can actually delete graduated two releases earlier under ValidatingAdmissionPolicy. Here's the exact boundary between the three mechanisms, and the stateful checks none of them can replace.
Docker Hub's 2026 Price Hikes Make the Case for a Self-Hosted Harbor Registry
Docker's 2026 price hikes and pull rate limits push a busy CI pipeline into a $1,800/year seat-priced plan for one feature: unlimited pulls. Here's what a self-hosted Harbor registry costs instead.
Docker Hub's Unauthenticated Pull Limits Are Still 100/6hr: When a Self-Hosted Registry Actually Pays Off
Docker Hub still caps unauthenticated pulls at 100/6hr and free accounts at 200/6hr in 2026. A concrete threshold for when a CI fleet should authenticate, pay for Pro, add a pull-through cache, or run its own registry.
E2B Grew 375x to 15M Sandbox Runs a Month. Here's What the Sub-500ms Bar Actually Costs to Clear Yourself
E2B's sandbox volume grew 375x in a year, setting a sub-500ms boot bar for AI agents. Here's what that latency actually decomposes into, and how a Kubernetes-native fleet on owned hardware clears it with Kata Containers instead of rebuilding E2B's control plane.
Your Git-Push PaaS Assumes GitHub. Here's What Wiring It to Forgejo + Woodpecker Actually Takes
A git-push PaaS built GitHub-first assumes a webhook, a payload shape, and a status write-back that don't just carry over to a self-hosted Forgejo + Woodpecker CI stack. Here's the concrete four-piece build-out — webhook receiver, deploy trigger, commit-status write-back, OAuth app — that makes it a first-class integration instead of a race condition.
GitHub Wobbled Three Separate Times in Eight Days: What Owning No Runner Capacity Costs
Three unrelated GitHub subsystems failed independently within eight days in July 2026. A concrete accounting of what broke, why that's a different risk shape than one outage repeating, and what actually changes when the build step and deploy target run on owned infrastructure instead.