» Tag
containers
31 postsRootless Edge Deployments: Daemonless CI/CD with Podman and Buildah
Mounting a root Docker socket in CI/CD pipelines with hardware access is a major risk. Podman and Buildah's rootless, daemonless design mitigates it.
Clipper Speeds Docker Builds 7x With Lazy Layer Pulling
Clipper, a custom BuildKit driver, exports cache mounts that ephemeral CI runners discard and skips unused runtime files, cutting Docker build times up to 7x.
Netkit: eBPF Datapath Closes the Container Networking Performance Gap
Netkit is an eBPF-based Linux datapath that eliminates redundant queue traversals, boosting container network throughput up to 37% with Cilium/Kubernetes.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comNetkit: Closing the Linux Container Networking Performance Gap
How Cilium's netkit devices and bpf_redirect_peer eliminate backlog queue overhead to match container network performance to bare host speeds.
The physics of Docker build caching: three caches, one wave
A measured breakdown of Docker's three build caches — layer chain, mount cache, image store — and when each caching strategy actually helps.
Code on Incus gives every AI coding agent its own isolated machine
Code on Incus isolates AI coding agents in secure system containers with real-time threat detection, protecting host machines from credential leaks and attacks.
MCP vs CLI: What Actually Survived in Production
A retrospective on MCP vs CLI for AI agents: token costs, lifecycle independence, containers, and a decision tree built from production failures.
Docker and QEMU now run on Vinix, a new OS/kernel written from scratch
Vinix supports Docker and QEMU, offering new possibilities for engineers and developers.
Fender: a Docker socket proxy that removes Docker Hub lock-in
Fender sits between the Docker CLI and daemon, transparently rewriting image references to your chosen registries—no Dockerfile or CI script changes required.
How to Self-Host a Validated AI Coding Assistant with NVIDIA NeMo Guardrails
Self-host your AI coding assistant with NVIDIA NeMo Guardrails. Establish a system that prevents errors and ensures traceability.