61
Topics /
Infrastructure & DevOps
The most popular blog posts about infrastructure & devops on Hacker News. 151 posts.
62
Pnpm has a new setting to stave off supply chain attacks
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly...
63
Podman Desktop celebrates 3M downloads
We reached 3,000,000 Downloads of Podman Desktop. Let's celebrate.
64
Build a tiny CA for your homelab with a Raspberry Pi
Let's make a tiny, standalone CA! We'll use a Raspberry Pi 4, YubiKey 5 NFC, and Infinite Noise TRNG.
65
uv downloads overtake Poetry for Wagtail users
uv download statistics overtake Poetry for Wagtail users
66
Everything as code: How we manage our company in one monorepo
Frontend, backend, marketing website, documentation, blog content, investor site, Chrome extension, Google Docs add-on,cloud functions, demo repos—all in…
67
Making Postgres scale
A war story of manually sharding Postgres across 6 databases under load, and the case for automating the process with a proxy instead of weeks of engineering effort.
68
Ubuntu LTS releases to 15 years with Legacy add-on
Ubuntu Pro now supports LTS releases for up to 15 years through the Legacy add-on. More security, more stability, and greater control over upgrade timelines for enterprises. […]
69
How to harden GitHub Actions
Build resilient GitHub Actions workflows with insights from real attacks, missteps to avoid, and security tips GitHub’s docs don’t fully cover.
70
OCSP Service Has Reached End of Life
Today we turned off our Online Certificate Status Protocol (OCSP) service, as announced in December of last year. We stopped including OCSP URLs in our certificates more than 90 days ago, so all Let’s Encrypt certificates that contained OCSP URLs have now expired. Going forward, we will publish revocation information…
71
The GitHub Actions control plane is no longer free
GitHub is adding a $0.002-per-minute fee on all GitHub Actions usage, so the control plane is no longer free.
72
Uv overtakes pip in CI
An opportunity for more opinionated defaults
73
Kubernetes Ingress Nginx is retiring
To prioritize the safety and security of the ecosystem, Kubernetes SIG Network and the Security Response Committee are announcing the upcoming retirement of Ingress NGINX. Best-effort maintenance will continue until March 2026. Afterward, there will be no further releases, no bugfixes, and no updates to resolve any…
74
Reinventing how .NET builds and ships (again)
An exploration of how .NET evolved from a distributed build system to Unified Build, dramatically reducing complexity and build times while improving flexibility and predictability for shipping .NET releases.
75
NixOS 25.11 released
Nix is a tool that takes a unique approach to package management and system configuration. Learn how to make reproducible, declarative and reliable systems.
76
Cloudflare incident on August 21, 2025
On August 21, 2025, an influx of traffic directed toward clients hosted in AWS us-east-1 caused severe congestion on links between Cloudflare and us-east-1. In this post, we explain what the failure was, why it occurred, and what we’re doing to make sure this doesn’t happen again.
77
How We Found 7 TiB of Memory Just Sitting Around
How we saved 7 TiB of memory across our Kubernetes clusters by disabling namespace listwatching in Vector, reducing daemonset overhead and API server load at scale.
78
Zero-Downtime Kubernetes Deployments on AWS with EKS
Zero-downtime deployments on Kubernetes on AWS EKS utilizing Pod Readiness Gates, graceful application shutdown and termination delays with code examples in Go
79
How when AWS was down, we were not
Nothing can have an unlimited uptime. But even when AWS and other hyperscalers are having incidents, we've created an architecture that is resilient to those outages. Here's how we do it for Authress.
80
Scaling our observability platform by embracing wide events and replacing OTel
Read how we scaled our observability platform from 19PB to 100PB and 500 trillion rows by replacing OpenTelemetry with a native ClickHouse-to-ClickHouse pipeline, embracing wide events and cutting CPU usage by 90%.
81
Dagger: A shell for the container age
Build powerful software environments and containerized operations from modular components and simple functions. Perfect for complex software delivery and AI agents. Built by the creators of Docker.
82
Six day and IP address certificate options in 2025
Update: January 15, 2026 Six-day and IP address certificates are now generally available. See 6-day and IP Address Certificates are Generally Available for details. This year we will continue to pursue our commitment to improving the security of the Web PKI by introducing the option to get certificates with six-day…
83
Rocky Linux 10 Will Support RISC-V
🏗️ Rocky Linux 10 Will Support RISC-V! We're excited to announce that Rocky Linux 10 will officially support RISC-V! Thanks to the incredible work of...
84
Immutable Software Deploys Using ZFS Jails on FreeBSD
An article demonstrating immutable software deployments using ZFS snapshots and FreeBSD jails, with Caddy as a health‑checked reverse proxy for zero‑downtime upgrades.
85
I gave up on self-hosted Sentry (2024)
Discover why I gave up on self-hosting Sentry before even starting. The high hardware needs, tricky setup, and heavy maintenance made it not worth the trouble.
86
How the economics of multitenancy work
CI is chaotic, bursty, spiky, and short-lived. That chaos is a nightmare unless you’re built for it. Blacksmith’s serverless CI cloud thrives on unpredictability: more customers = more noise = smoother utilization = lower costs for everyone. Multitenancy isn’t just efficient — it’s profitable. And yes, the margins are…
87
How we reduced the impact of zombie clients
Every night, right around midnight (mainly UTC), a horde of zombies wakes up and clamors for … digital certificates! The zombies in question are abandoned or misconfigured Internet servers and ACME clients that have been set to request certificates from Let’s Encrypt. As our certificates last for at most 90 days…
88
LetsEncrypt – Expiration Notification Service Has Ended
Since its inception, Let’s Encrypt has been sending expiration notification emails to subscribers that have provided an email address to us via the ACME API. This service ended on June 4, 2025. The decision to end the service is the result of the following factors: Over the past 10 years more and more of our…
89
GitHub Linux ARM64 hosted runners now available for free in public repositories
Now in public preview, Linux arm64 hosted runners are available for free in public repositories. Following the release of arm64 larger hosted runners in June, this offering now extends to…
90
Podman Quadlets with Podman Desktop
Learn how to create & manage and use Quadlets with Podman Desktop