Curated river of news
Latest posts from blogs I follow
Forgive me, Reader. It’s been five months since my last vibe check. That’s a lot of ground to cover and it’s not possible to get into everything that happened. Like in real life conversations, instead of telling you how I’m ...
If you've ever tried to enforce a security policy across a fleet of Kubernetes clusters, you've probably run into a frustrating chicken-and-egg problem. Your admission policies are API objects, which means they don't exist until someone creates them, and they ...
For when I want a word count that ignores Markdown symbols
Topics covered in this episode: profiling-explorer Reverting the incremental GC in Python 3.14 and 3.15 VSCode AI Co-author defaults to on, then off django freeze Extras Joke See the full show notes for this episode on the website at pythonbytes.fm/478
Your container runs as root and has 18 CVEs. A Docker Captain's guide to hardening, Scout policies, DHI, Sandboxes, and what comes after Docker.
I have complex feelings about Generative AI but one area I find myself weirdly bullish on is small language models (SLMs) in the browser which are available in Chrome and Edge behind an experimental flag. I know, I know. I ...
I updated my app todometer after several years of it lying dormant, and it's better than ever!
Kubernetes v1.36 introduces Pod-Level Resource Managers as an alpha feature, bringing a more flexible and powerful resource management model to performance-sensitive workloads. This enhancement extends the kubelet's Topology, CPU, and Memory Managers to support pod-level resource specifications (.spec.resources), evolving them ...
Today I learned Python 3.15 will get a new sentinel built-in. Sentinel values are unique placeholder values that are commonly used in programming. Python 3.15 ships with a new built-in sentinel that can be used to create new sentinel values: ...
AI and its terrible, horrible, no good, very bad week
A discussion on how features of programming languages can make it hard to avoid expressing or talking about things you may or may not care about as a programmer.
A tribute to Inconsolation, Terminal Trove's inspiration.
Following the graduation of Pod-Level Resources to Beta in v1.34 and the General Availability (GA) of In-Place Pod Vertical Scaling in v1.35, the Kubernetes community is thrilled to announce that In-Place Pod-Level Resources Vertical Scaling has graduated to Beta in ...
This week, I joined Will Vincent and Carlton Gibson on the Django Chat podcast for DjangoCon Europe Recap + Other News. You can also watch it on DjangoTV via YouTube. On this episode, we discussed DjangoCon Europe, which Carlton had ...
\"Pull AI models from Docker Hub, run them locally with GPU acceleration, and build an AI-powered app
A wrap up of all the things that happened in Terminal Trove in April 2026.
On behalf of SIG Node, we are pleased to announce updates to the Memory QoS feature (alpha) in Kubernetes v1.36. Memory QoS uses the cgroup v2 memory controller to give the kernel better guidance on how to treat container memory. ...
Bitwarden's CLI got hit by the Checkmarx supply-chain campaign, TypeScript 7.0 beta lands with the Go-rewritten compiler running ~10x faster than 6.0, and pgBackRest lost its maintainer of thirteen years leaving anyone running production Postgres with a real dependency-trust task ...
Turso, Neon, Polars, Databend, Materialize, DataFusion, InfluxDB, Quickwit and even ripgrep. Outside of DuckDB and PostgreSQL's core, most, if not all, the most-impactful projects in the database world are now
A Lightning Fast Kubernetes navigator.
If you are vibe coding and you don’t review any of the code, like a true vibe coder, you should build your system in Rust. I know, that’s a controversial statement. But hear me out. We will see how good ...
Staleness in Kubernetes controllers is a problem that affects many controllers, and is something may affect controller behavior in subtle ways. It is usually not until it is too late, when a controller in production has already taken incorrect action, ...
How kube-scheduler picks a node: 13 framework stages, 14 Filter plugins, 9 Score plugins, live preemption demo.
I spoke at Codemotion Madrid and had a blast!
The cloud is convenient until it isn't. You upload your photos, sync your contacts, click through the cookie banners. Then prices go up again or you read about a family that lost their entire Google account over a medical photo ...
Kubernetes v1.36 promotes the ability to modify container resource requests and limits in the pod template of a suspended Job to beta. First introduced as alpha in v1.35, this feature allows queue controllers and cluster administrators to adjust CPU, memory, ...
Learn how to work around the Python machinery to resolve an explicit lazy import manually. A couple of articles ago I wrote about how you could inspect a lazy import. Apparently, you can use a similar trick to check the ...
If you’ve ever been as frustrated as I am at Ubuntu’s–technically, systemd’s–bog stubborn refusal to use the DNS servers you specify in your network configuration, this is the post for you. I personally think it’s Bloody Stupid Johnson levels of ...
Today on the show I’m talking with Amelia Wattenberger — designer, data-viz veteran, ex-GitHub Next, and now designing Intent at Augment Code. What if the last 30% of any software project is about to become the hardest part you’ve ever ...
On behalf of Kubernetes SIG Auth and SIG Node, we are pleased to announce the graduation of fine-grained kubelet API authorization to General Availability (GA) in Kubernetes v1.36! The KubeletFineGrainedAuthz feature gate was introduced as an opt-in alpha feature in ...
Stop writing Dockerfiles from scratch. A Docker Captain walks through docker init, layer caching, multi-stage builds, and docker debug for 2026.
Big tech giveth, and big tech taketh away
Every step of what happens when you run kubectl run nginx on Kubernetes. From argv to etcd Raft, scheduler, CRI, CNI, runc, and PLEG.
Fork Around and Get EmailSponsor FAFOFM"Everyone is a beginner at one point." Even one of the creators of Kubernetes. If you're listening to this podcast then Joe has had an impact on what you do. He's worked on everything from ...
Yesterday, I opened Discord to a message from my friend Bastian Allgeier that I had never quite seen in all the years I’ve been building sites with his Kirby CMS. “Today we are releasing our biggest security release in the ...
After several years of development, User Namespaces support in Kubernetes reached General Availability (GA) with the v1.36 release. This is a Linux-only feature. For those of us working on low level container runtimes and rootless technologies, this has been a ...
… everything. I need to know less, but I know more. Trying to cultivate a life which allows me to know less while still participating in society requires me to...
I get this question a lot so wanted to summarize what I've been up to all in one place. In 2026.01 I started my 16 week parental leave for my first born. Here's what I did. Parenting First and foremos...
Everyone should make music in some shape or form. You don’t even have to be very good at it.
Hi All! 🤗 The Latin word curare means “to take care of.” It’s the root of curator – a person whose work is not to create, but to care. To select, to arrange, to provide context. In a museum, the ...
