Skip to main content

1732 posts tagged with "Self-Hosting"

Running your own PaaS and infrastructure on machines you own

View all tags

Read the Self-hosted PaaS guide

Daytona's Repo Is Frozen — Will the Fork Survive? What Three Open-Source Relicenses Teach About Betting on Nightona
·Dora Noda·10 min

Daytona's Repo Is Frozen — Will the Fork Survive? What Three Open-Source Relicenses Teach About Betting on Nightona

Daytona froze its public repo at v0.190.0 in June 2026 and moved development private. Community fork Nightona carries the AGPL tree forward, but the HashiCorp, Redis, and Elasticsearch precedents say forks survive only with funded maintainers, neutral governance, and API compat — Nightona scores half a point out of three.

AI agents
self-hosting
infrastructure
security
Firecracker Is the Easy 5%: What Self-Hosting an E2B-Style Agent Sandbox Really Operates
·Dora Noda·12 min

Firecracker Is the Easy 5%: What Self-Hosting an E2B-Style Agent Sandbox Really Operates

E2B's enterprise pitch admits the microVM is the easy part. An eight-piece control-plane inventory plus a hosted-vs-self-hosted cost comparison shows what running agent sandboxes yourself actually operates.

AI agents
self-hosting
PaaS
Kubernetes
Ephemeral Preview Environments Without a SaaS Bill: Namespace-per-PR on Owned Hardware
·Dora Noda·11 min

Ephemeral Preview Environments Without a SaaS Bill: Namespace-per-PR on Owned Hardware

Full-stack PR previews cost a typical 8-developer team about $99 a month on Render's cheapest seats — or roughly $0 marginal on an already-paid Hetzner box. A line-by-line cost comparison plus the ArgoCD namespace-per-PR wiring and TTL teardown discipline that make previews a default instead of a line item.

PaaS
cost-optimization
self-hosting
Kubernetes
Falco's Prempti Is a Policy Layer for AI Coding Agents, Not Kernel Security: What It Catches and Misses
·Dora Noda·13 min

Falco's Prempti Is a Policy Layer for AI Coding Agents, Not Kernel Security: What It Catches and Misses

Falco's Prempti judges an AI coding agent's tool calls before they execute — but it never sees a syscall. A scenario-by-scenario map of what hook-level policy, eBPF monitoring, and microVM sandboxes each catch and miss on the deploy-from-chat path.

cybersecurity
AI agents
Model Context Protocol
self-hosting
Talos vs Flatcar in 2026: Picking the Immutable OS Under Your CAPH Fleet
·Dora Noda·11 min

Talos vs Flatcar in 2026: Picking the Immutable OS Under Your CAPH Fleet

Talos Linux ships Kubernetes in an 80 MB API-only image with no SSH; Flatcar pairs familiar Linux with automatic A/B updates proven on 20,000 Adobe nodes. A head-to-head on provisioning, updates, 3am debugging, and governance — with a verdict for small CAPH fleets on Hetzner.

self-hosting
PaaS
Kubernetes
infrastructure
Flatcar Brings Omaha-Style Auto-Updates Into CNCF Custody: What A-B Partition Rollouts With Automatic Reboots Mean for Unattended Node Updates Across a Hetzner Fleet
·Dora Noda·9 min

Flatcar Brings Omaha-Style Auto-Updates Into CNCF Custody: What A-B Partition Rollouts With Automatic Reboots Mean for Unattended Node Updates Across a Hetzner Fleet

Flatcar Container Linux entered the CNCF incubator with Adobe running 20,000 nodes on it. What its Omaha-driven A-B auto-updates change for Cluster-API fleets on Hetzner — and the channel pins plus reboot coordination that make unattended node updates safe.

Kubernetes
self-hosting
infrastructure
PaaS
+1
Flox's $25M Bet That Reproducible Environments Are Infrastructure: What It Means for the Git-Push Build Contract
·Dora Noda·10 min

Flox's $25M Bet That Reproducible Environments Are Infrastructure: What It Means for the Git-Push Build Contract

Flox raised $25M to sell Nix-powered reproducible environments as enterprise infrastructure. What environment-as-artifact changes for git-push PaaS builds — bit-for-bit failure repro, per-repo toolchain pins — and where it just moves builder maintenance onto tenants.

PaaS
self-hosting
infrastructure
developer tools
Gateway API v1.6: One Ingress Stack for HTTP, TCP, and UDP — No Second Load Balancer
·Dora Noda·11 min

Gateway API v1.6: One Ingress Stack for HTTP, TCP, and UDP — No Second Load Balancer

Gateway API v1.6 graduates TCPRoute and UDPRoute to stable v1, so one Gateway can serve HTTP apps, TCP services, and QUIC/UDP endpoints. A concrete one-Gateway design with YAML, the TLS terminate-vs-passthrough table, L4 port and tenancy rules, and when to keep a second load balancer anyway.

Kubernetes
PaaS
self-hosting
infrastructure
Headlamp's Plugin Sprint Gave Kubeflow, Volcano, and Knative a GUI: Is It Ready to Be Your Fleet's Operator Console?
·Dora Noda·10 min

Headlamp's Plugin Sprint Gave Kubeflow, Volcano, and Knative a GUI: Is It Ready to Be Your Fleet's Operator Console?

Headlamp shipped GUI plugins for Cluster API, Volcano, Knative, and Kubeflow in summer 2026. A plugin-by-plugin scorecard — versions, capabilities, honest gaps — and what it means for a self-hosted fleet running AI-agent workloads.

Kubernetes
self-hosting
PaaS
AI agents
+1
Showing 703–711 of 1732 posts