1
Everything as code: How we manage our company in one monorepo
Frontend, backend, marketing website, documentation, blog content, investor site, Chrome extension, Google Docs add-on,cloud functions, demo repos—all in…
New
The latest blog posts to take off on Hacker News. 151 posts.
2
A faster heart for F-Droid
Donations are a key part of what keeps F-Droid independent and reliable and our latest hardware update is a direct result of your support. Thanks to donation...
3
Is Northern Virginia still the least reliable AWS region?
We analyzed if AWS’ N. Virginia region remains the least reliable in 2025. Overview of outages, affected services, and the massive October 20 AWS incident, with insights from StatusGator’s real-time monitoring.
4
A faster path to container images in Bazel
rules_img is a Bazel ruleset for building and publishing OCI images that feel native to Bazel by treating images as metadata first and moving bytes only at the edges.
5
Virtualizing Nvidia HGX B200 GPUs with Open Source
This blog post covers how we virtualized NVIDIA HGX B200 GPUs using open-source software. It talks about VFIO passthrough, QEMU PCI topology fixes, large BAR boot stalls, and Fabric Manager partitions.
6
A Safer Container Ecosystem with Docker: Free Docker Hardened Images
Security for everyone. Docker Hardened Images are now free to use, share, and build on with no licensing surprises.
7
The GitHub Actions control plane is no longer free
GitHub is adding a $0.002-per-minute fee on all GitHub Actions usage, so the control plane is no longer free.
8
Coming soon: Simpler pricing and a better experience for GitHub Actions
Update: We’ve read your posts and heard your feedback. We’re postponing the announced billing change for self-hosted GitHub Actions to take time to re-evaluate our approach. We are continuing to…
9
Pricing Changes for GitHub Actions
GitHub Actions pricing update: Discover lower runner rates (up to 39% off) following a major re-architecture for faster, more reliable CI/CD.
10
Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem
On November 25th, one of our engineers was compromised by the Shai-Hulud npm supply chain worm. Here's what happened, how we responded, and what we've changed.
11
Why Twilio Segment moved from microservices back to a monolith
Discover Twilio’s shift to a single powerful service! Learn cloud communication trends, customer success stories, and how to build scalable apps. Join now!
12
We built another object storage
High-performance object storage exists, but the economics make it unusable at scale. FractalBits breaks out of the high-performance trap.
13
Litestream VFS
Query your SQLite database any time, anywhere
14
Decreasing Certificate Lifetimes to 45 Days
Let’s Encrypt will be reducing the validity period of the certificates we issue. We currently issue certificates valid for 90 days, which will be cut in half to 45 days by 2028. This change is being made along with the rest of the industry, as required by the CA/Browser Forum Baseline Requirements, which set the…
15
You want microservices, but do you need them?
Before you default to microservices, weigh hidden costs and consider a modular monolith or SOA. Learn when Docker delivers consistency and scale—without sprawl.
16
NixOS 25.11 released
Nix is a tool that takes a unique approach to package management and system configuration. Learn how to make reproducible, declarative and reliable systems.
17
Reinventing how .NET builds and ships (again)
An exploration of how .NET evolved from a distributed build system to Unified Build, dramatically reducing complexity and build times while improving flexibility and predictability for shipping .NET releases.
18
GrapheneOS migrates server infrastructure from France
The GrapheneOS project has announced on X that they are ceasing all operations in France, asserting that the country is no longer safe for "open source projects"
19
20
Building the largest known Kubernetes cluster
Learn about the architectural innovations we used to build a 130,000-node Kubernetes cluster, and the trends driving demand for these environments.
21
Ubuntu LTS releases to 15 years with Legacy add-on
Ubuntu Pro now supports LTS releases for up to 15 years through the Legacy add-on. More security, more stability, and greater control over upgrade timelines for enterprises. […]
22
A $1k AWS mistake
A cautionary tale about AWS VPC networking, NAT Gateways, and how a missing VPC Endpoint turned our S3 data transfers into an expensive lesson.
23
The Connectivity Standards Alliance Announces Zigbee 4.0 and Suzi
DAVIS, California – November 18, 2025 – The Connectivity Standards Alliance (Alliance) announced today the release of Zigbee 4.0 and Suzi, the new brand for Zigbee’s Sub-GHz feature…
24
How when AWS was down, we were not
Nothing can have an unlimited uptime. But even when AWS and other hyperscalers are having incidents, we've created an architecture that is resilient to those outages. Here's how we do it for Authress.
25
Backblaze Drive Stats for Q3 2025
Read the Q3 2025 Drive Stats report to see the latest annualized failure rates, and an analysis of how we define failure in the first place.
26
Kubernetes Ingress Nginx is retiring
To prioritize the safety and security of the ecosystem, Kubernetes SIG Network and the Security Response Committee are announcing the upcoming retirement of Ingress NGINX. Best-effort maintenance will continue until March 2026. Afterward, there will be no further releases, no bugfixes, and no updates to resolve any…
27
We cut our Mongo DB costs by 90% by moving to Hetzner
We moved MongoDB Atlas off AWS and onto self-hosted Hetzner boxes — 90% cost cut, no performance loss. Here's the setup, the Ansible, and what broke.
28
Run Nix Based Environments in Kubernetes
Run reproducible, immutable environments in Kubernetes without container images. Faster deploys, SBOMs-by-default, and zero drift with Flox.
29
Immutable Software Deploys Using ZFS Jails on FreeBSD
An article demonstrating immutable software deployments using ZFS snapshots and FreeBSD jails, with Caddy as a health‑checked reverse proxy for zero‑downtime upgrades.
30
An eBPF loophole: Using XDP for egress traffic
XDP only works for ingress. We found a loophole that lets it work for egress. Here's how we did the impossible.