CachyOS
HYPRLAND V0.56 FIXES LAND, PACKAGE ECOSYSTEM ROLLS FORWARD
Hyprland configuration updated for v0.56 compatibility across multiple desks, while the AUR-derived ecosystem locked in four automated package bumps.
Read the wire →
Topic · Infrastructure
Infrastructure news, every morning.
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
Last 7 days
Linux
IO_URING FIXES AND SOCKMAP USE-AFTER-FREE PATCH LAND IN 7.2-RC
Linus merged critical io_uring corrections and a high-impact sockmap race condition fix that closes a threading vulnerability in TCP BPF message handling.
Read the wire →
Arch Linux
LINUX-LTS CLEARS TESTING, ARCHINSTALL FIXES ARM64 GRUB AND LIMINE
Linux-LTS moved from core-testing to stable across x86_64 after validation [ref:1], while archinstall patches critical EFI installation failures on aarch64 that broke both GRUB and Limine [ref:10].
Read the wire →
HashiCorp
TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES
HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.
Read the wire →
Kubernetes
SCHEDULER GAINS PREQUEUING FILTER, KUBELET USER NAMESPACES MOVE TO BETA
Kubernetes tackles the pod requeue bottleneck that's been choking large clusters, while user namespacing ships closer to production.
Read the wire →
Go
PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26
The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.
Read the wire →
CachyOS
INSTALLER REFACTOR TAKES SHAPE, PACKAGE UPDATES ROLL STEADY
CachyOS is modernizing its CLI installer with a comprehensive typed partition system overhaul while maintaining smooth automation across the AUR-derived package repository.
Read the wire →
Linux
KERNEL PATCHES CLOSE NAMESPACE PRIVILEGE ESCALATION GAPS IN TUNNEL DRIVERS
Two critical fixes close a privilege escalation hole in VXLAN and GENEVE tunnel changelink operations that allowed unprivileged callers in one namespace to rewrite devices whose underlay lives elsewhere.
Read the wire →
Arch Linux
KEYCHAIN 3.0 LANDS IN TESTING, ARCHINSTALL TIGHTENS VALIDATION
Arch's package repos are moving fast: keychain climbs to 3.0.0, Deno reaches 2.9.4, and archinstall ships critical validator fixes across Pydantic models.
Read the wire →
HashiCorp
VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0
Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.
Read the wire →
Kubernetes
CLUSTER-AUTOSCALER PATCHES HIT ALL RELEASE BRANCHES AS DRA AND VOLUMEMOUNT BIND OPTIONS LAND
Cluster-autoscaler shipped four patch releases across versions 1.33 through 1.36 fixing ProvisioningRequest condition application and Scaleway node detection, while Kubernetes core merged DRA node operations and volumeMount bind mount options.
Read the wire →
Go
GO REWORKS HTTP/3 REGISTRATION, KILLS GLOBAL STATE IN MODULE LOADER
Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.
Read the wire →
CachyOS
BRAVE BROWSER SOURCES SHIFT TO APT, GAME RULES SURGE, GERMAN WIKI TRANSLATIONS ACCELERATE
CachyOS is consolidating Brave packaging around apt sources while ananicy-rules absorbs a massive gaming ruleset expansion and the wiki team pushes German localization across multiple docs.
Read the wire →
Linux
WATCHDOG UAF AND DIVISION-BY-ZERO FIXES LAND IN V7.2-RC5
Linus merged critical watchdog subsystem patches addressing a use-after-free vulnerability and a zero-division crash that could tank embedded systems in production.
Read the wire →
Arch Linux
ARCHINSTALL FIXES LOCALIZATION BUILD THAT BROKE THREE TIMES
Archinstall's translation pipeline finally handles runtime binding descriptions correctly, after manual patches kept getting wiped by automated regeneration.
Read the wire →
HashiCorp
CONSUL FIXES FLOODED MEMBER REJOIN BUG AS VSO PATCHES GRPC FRAME FLOOD
Consul patches a critical WAN flood regression that was incorrectly treating failed members as alive during rejoin sequences.
Read the wire →
Kubernetes
DRA GETS SMARTER RESOURCE ACCOUNTING, CLUSTER-AUTOSCALER ROLLS OUT FOUR PATCHES
Dynamic Resource Allocation fixed device accounting across its resource pool controller while cluster-autoscaler shipped maintenance releases across four versions.
Read the wire →
Go
GOPLS FIXES COMMENT HANDLING IN COMPOSITE LITERALS, VULNDB ADDS 46 SECURITY REPORTS
A critical gopls bug that corrupted code when comments appeared in composite literals is fixed, while the vulnerability database absorbs a major batch of 46 new security reports across the ecosystem.
Read the wire →
CachyOS
PROTON 11.0 SHIPS WITH LOW-LATENCY VKD3D, MIRROR NETWORK EXPANDS
Proton 11.0 lands experimental low-latency graphics support while CachyOS adds a Hungary mirror to its distribution tier.
Read the wire →
Linux
KERNEL RC5 LANDS WITH HWMON FIXES AND KVM STABILITY PATCHES
Linux 7.2-rc5 rolls out critical hardware monitoring fixes and RISC-V virtualization patches that tighten KVM stability across multiple architectures.
Read the wire →
Arch Linux
ARCHINSTALL TIGHTENS CODE QUALITY, BUILDBTW MODERNIZES ORM LAYER
Archinstall shipped four quality fixes in 24 hours while buildbtw migrated off deprecated SeaORM patterns, setting both projects up for stable releases.
Read the wire →
HashiCorp
TERRAFORM AWS PROVIDER GAINS S3 TABLES AND OPENSEARCH FEDERATION SUPPORT
The AWS provider shipped three enhancement PRs overnight that expand infrastructure-as-code coverage for S3 Tables metadata properties and OpenSearch security configurations, while the docs team cleaned up deprecated tutorial collections and fixed formatting bugs across Vault and PKI documentation.
Read the wire →
Kubernetes
DRA GRADUATES TO STABLE, KUBELET METRICS BYPASS CADVISOR, NAMESPACE LIFECYCLE UNBLOCKED
Three critical production fixes ship across core scheduler, metrics, and admission layers while DRA resource tracking stabilizes after surfacing a crash bug in the informer.
Read the wire →
Go
COMPILER SHRINKS CODE SIZE WHILE QUIC FIXES BUSY-LOOP HANGS
The Go compiler now frees unused registers at loop headers, cutting generated code size across all architectures, while the net package fixes a critical QUIC keep-alive deadlock that was burning CPU on blocked connections.
Read the wire →
CachyOS
NORWAY MIRROR DOWN, KERNEL STACK SHIPS MAINTENANCE RELEASES
CachyOS infrastructure is reporting a downed Norway mirror while the kernel and toolchain stacks push routine version bumps across the board.
Read the wire →
Linux
KERNEL HOTFIXES LAND AS OMARCHY CUTS IDLE WAKEUPS BY 66%
Andrew Morton merged 12 memory management fixes overnight while the desktop shell team eliminated the largest source of pointless CPU wakeups on idle systems.
Read the wire →
Arch Linux
FIREFOX 153 ENTERS TESTING WITH I18N ROLLOUT
Firefox 153 is now in extra-testing across both x86_64 and all architectures, signaling a major browser update moving toward stable.
Read the wire →
HashiCorp
TERRAFORM AWS PROVIDER GAINS MAIL MANAGER SERVICE, IPv6 MSK SUPPORT
Terraform AWS provider is shipping Mail Manager integration alongside IPv6 bootstrap broker support for MSK clusters, expanding AWS service coverage as the provider continues aggressive expansion.
Read the wire →
Kubernetes
GRPC SECURITY FIXES ROLL ACROSS KUBERNETES CORE IN COORDINATED PUSH
Google.golang.org/grpc v1.82.1 shipped with three security fixes, and Kubernetes is patching it everywhere at once: externaljwt, endpointslice, kube-scheduler, and dynamic-resource-allocation all landed the update overnight.
Read the wire →
Go
COMPILER CLEANUP AND PROXY BEHAVIOR FIXES SHIP ACROSS THE STACK
Go's compiler gets leaner while net/http fixes a decade-old proxy environment variable ambiguity that's finally caught up with the rest of the ecosystem.
Read the wire →
CachyOS
LINUX 7.2-RC4 LANDS WITH GAMING SCHEDULER, ANANICY OVERHAULS PROCESS TUNING
CachyOS shipped kernel 7.2-rc4 with a new gaming-optimized scheduler branch and AMD display fixes, while ananicy-rules yanked normal scheduling from most process types in a major behavioral shift.
Read the wire →
Linux
KERNEL BLOCKS DIO BOUNCE BUFFER CRASHES WHILE RISC-V VMEMMAP FIX LANDS
Block layer fixes restore bio allocation safety and prevent double-unpin crashes, while RISC-V patches eliminate spurious PTE faults and vDSO compiler elision.
Read the wire →
Arch Linux
TELEGRAM DESKTOP 7.0.2 SHIPS WITH STABILITY FIXES ACROSS LINUX ECOSYSTEM
Five critical package updates landed overnight, with Telegram Desktop 7.0.2 leading a refresh cycle that touches messaging, file management, music playback, and system tools.
Read the wire →
HashiCorp
PACKER KUBEVIRT FIXES DEADLOCK THAT FROZE BUILDS
A critical fix in the KubeVirt plugin removes a deadlock that was leaving Packer builds stuck waiting for DataVolumes that would never bind.
Read the wire →
Kubernetes
KUBERNETES CORE FIXES DRA FRACTIONAL QUANTITIES, VSPHERE STRIPS MD5 CRYPTO
Dynamic Resource Allocation now handles fractional resource requests, while vSphere cloud provider rips out cryptographically weak MD5 hashing and patches critical CVEs.
Read the wire →
Go
GO TOOLCHAIN BUILD FLAGS GET PRECISION FIX, CGO PROBE ESCAPES WRAPPER TRAP
The go command's cgo compiler version detection was running under -toolexec when it shouldn't have been, breaking builds for anyone wrapping their toolchain.
Read the wire →
CachyOS
CACHYOS LINUX 7.1.4 SHIPS WITH SCHEDULER REVERT AND AMD AUDIO FIXES
The kernel bumped to 7.1.4 overnight with a critical scheduler revert and targeted audio driver fixes for AMD systems.
Read the wire →
Linux
SCSI ERROR HANDLER RACE FIX LANDS, ARC AND S390 FOLLOW WITH CRITICAL PATCHES
The kernel merged a reliable wake fix for scsi_schedule_eh that eliminates rare races causing error handler hangs across libata and libsas drivers.
Read the wire →
Arch Linux
EXTRA REPO ROLLS OUT FIVE PACKAGE UPDATES OVERNIGHT
Arch Linux pushed routine maintenance across the extra repository, touching everything from virtualization tools to audio conversion.
Read the wire →
HashiCorp
NOMAD ECOSYSTEM DROPS NIGHTLY BUILDS FOR TESTING
Both the Podman driver and Autoscaler projects published fresh nightly snapshots overnight, giving operators a chance to validate against unreleased features before they hit stable channels.
Read the wire →
Kubernetes
AZURE KOPS TESTS FINALLY STABLE, STATEFULSET RECREATION LANDS
Three weeks of Azure e2e failures are fixed: kindnet pods can now reach the kube-apiserver, and StatefulSets get their long-awaited recreate update strategy.
Read the wire →
Go
GOPLS TIGHTENS PROTOCOL TYPES AS EXP ADDS TRAJECTORY UTILITIES
gopls just locked down its LSP protocol with stronger enum typing, while the experimental track opens a new eval/trajectory module for advanced analysis workflows.
Read the wire →