1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
KubeCon NA 2026 Preview: VM API, VMware's Cluster API Bet, and a Self-Hosted Fleet Watch List
KubeCon NA 2026 runs November 9–12 in Salt Lake City — a self-hosted fleet operator's watch list with the VM API verdict, VMware's Cluster API bet, sessions worth attending, and three actions for the Monday after.
Kubernetes 1.36 Killed gitRepo and Started the Clock on externalIPs: A Bare-Metal Migration Guide
Kubernetes 1.36 permanently removes gitRepo volumes and deprecates Service externalIPs ahead of removal in v1.43 — a migration playbook with detection commands and bare-metal replacements for each.
The Kubernetes 1.37 Containerd Deadline That Doesn't Exist: A Fleet Upgrade Verification Playbook
Kubernetes 1.37 did not drop containerd 1.x support — the CRI fallback removal was deferred to 1.38 — but viral upgrade guides say otherwise. The changelog receipts, the four real 1.37 gates, the containerd 1.7 deadline that actually passed, and a 15-minute pre-rollout check for self-hosted fleets.
LiteBox 0.1: Microsoft's Rust Library OS Wants the Seat Between gVisor and Firecracker
Microsoft's LiteBox v0.1 is a Rust library OS claiming the empty seat between gVisor and Firecracker for sandboxing untrusted AI-agent code. A hands-on read of the release, an eight-row comparison table, and the six-item checklist before it earns a node pool.
MCP Pays for Itself at Three Systems — So Scope Your Deploy Server Like a Guest
An October 2026 MCP audit says the protocol pays for itself at three connected systems and charges interest past thirty tools. A worked token budget for a twelve-tool deploy server, and where every-endpoint-agent-callable becomes breakage.
One ZMQ Message to Root: What LMCache's CVE-2026-105192 Means for Self-Hosting the LLM KV-Cache Layer
LMCache's CVE-2026-105192 let one unauthenticated ZeroMQ message run code as root on self-hosted inference cache servers; v0.5.6 fixes it, and this post shows how to tell if you were exposed and how to harden the deployment.
Portainer 3.0 Ends the Community Edition: Dockge vs Komodo vs Arcane as the Docker-Only Replacement
Portainer 3.0 ships with no Community Edition build, freezing CE on 2.x — a concrete comparison of Dockge, Komodo, Arcane, Coolify, and Dokploy on compose stacks, multi-host, and auth, plus why foundation-owned tooling is the structural defense.
Preview Environments Compared: What Railway's Auto-Delete, Render's Full Copies, and Fly.io's DIY Wiring Each Cost a Team Shipping Daily
Railway, Render, and Fly.io bill the same 40 preview-days a month at wildly different totals — a per-PR ledger for one web-plus-worker-plus-Postgres stack, the stale-preview, per-PR-database, and CI-glue line items beyond compute, and the ephemeral-namespace default a self-hosted platform should run instead.
Governed Tools vs. Raw API Keys: What Qovery's MCP Server Gets Right, and Where Raw API Still Wins
Qovery's MCP server gives AI agents narrow deploy and read-logs tools instead of broad API keys — but a tool catalog costs tokens, accuracy, and maintenance. A decision framework for when governed tools win, when raw API plus prompt wins, and the promotion rule for deploy-from-chat.