» Tag
containers
24 postsRDMA in gVisor: A Deep Dive into GPU Networking
gVisor enhances GPU networking with RDMA support, improving performance and security isolation.
Smol Machines: Kubernetes in a MicroVM
Smol machines enable running a real Kubernetes cluster in a single microVM, enhancing isolation and control for engineers.
Configuring Docker Macvlan and Ipvlan for Dedicated LAN IPs
Learn how to configure dedicated LAN IPs using Docker macvlan and ipvlan with step-by-step instructions.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comShipyard: How We Built Slack’s Next-Generation EC2 Platform
Slack developed Shipyard to modernize its EC2 infrastructure. The new platform offers safe and predictable updates.
Building Secure AI Sandboxes on Kubernetes
Comparing gVisor, Kata, and Firecracker for running untrusted AI agent code safely on Kubernetes, and why pods alone aren't a security boundary.
ArcBox: From-Scratch Container Runtime for macOS Built in Rust
ArcBox is an open-source container runtime for macOS, built in Rust. It offers Docker compatibility and cloud scalability.
Cronstable: A Cron Replacement with Retries, TUI/DAGs, and More
Cronstable is a reliable, multi-architecture cron replacement offering retries, DAGs, and a web dashboard.
Benchmarking Cloudflare Containers vs. AWS MicroVMs
Cold start benchmarks highlight AWS MicroVMs' speed and consistency over Cloudflare containers.
How to Shrink a Docker Image From 1.2GB to 180MB
A practical guide to cutting Docker image size by 85% without touching app code: multi-stage builds, slim base images, layer ordering and .dockerignore.
Ranked List of Sandboxes for Running AI Coding Agents by Security
Explore a ranked list of sandbox solutions for AI coding agents, focusing on security posture and isolation.