CachyOS
LINUX 7.1.5 AND 6.18.40 SHIP WITH UPSTREAM REBASES AND DRIVER FIXES
CachyOS dropped two kernel releases overnight, pulling in upstream stability patches and refining the apple-bce driver stack for T2 Macs.
read --wire →
$ tail -f topics/infra.log
Infrastructure news, every morning.
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
Your week in Infrastructure, every Monday.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Recent wires
Linux
RUST TOOLCHAIN FIXES LAND, OMARCHY TACKLES SUSPEND RACE AND HARDWARE DETECTION
Linus merged rust infrastructure updates and a cascade of subsystem fixes across firewire, LoongArch, and perf tooling, while the Omarchy team shipped five critical fixes addressing fingerprint reader false positives, zram configuration conflicts, and a dangerous screen-lock-to-suspend race condition.
read --wire →
Arch Linux
ARCH LINUX KERNEL 7.1.5 LANDS WITH SECURITY AND STABILITY FIXES
The Arch Linux kernel team shipped v7.1.5-arch1, patching critical GPU deadlocks and unprivileged namespace vulnerabilities in one of the distribution's most closely watched packages.
read --wire →
HashiCorp
NOMAD ECOSYSTEM OPENS NIGHTLY BUILDS FOR EARLY TESTING
Both the Podman driver and Autoscaler shipped nightly snapshots overnight, signaling active development cycles and giving operators a chance to validate upcoming changes before stable release.
read --wire →
Kubernetes
OPENSTACK CLOUD CONTROLLER MANAGER 2.36.1 SHIPS AS MANILA CSI GETS PROBE RETRY FIX
The OpenStack cloud provider released version 2.36.1 of its Helm chart while engineers fix critical snapshot deletion bugs in Cinder that could silently leak backups.
read --wire →
Go
GO STRIPS MIPS REGISTER ALLOCATOR SUPPORT
Go's compiler is ripping out HI/LO register support for MIPS, closing the door on a decade of architectural complexity that wasn't worth the maintenance tax.
read --wire →
CachyOS
HYPRLAND V0.56 FIXES LAND, PACKAGE ECOSYSTEM ROLLS FORWARD
Hyprland configuration updated for v0.56 compatibility across multiple desks, while the AUR-derived ecosystem locked in four automated package bumps.
read --wire →
Linux
IO_URING FIXES AND SOCKMAP USE-AFTER-FREE PATCH LAND IN 7.2-RC
Linus merged critical io_uring corrections and a high-impact sockmap race condition fix that closes a threading vulnerability in TCP BPF message handling.
read --wire →
Arch Linux
LINUX-LTS CLEARS TESTING, ARCHINSTALL FIXES ARM64 GRUB AND LIMINE
Linux-LTS moved from core-testing to stable across x86_64 after validation [ref:1], while archinstall patches critical EFI installation failures on aarch64 that broke both GRUB and Limine [ref:10].
read --wire →
HashiCorp
TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES
HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.
read --wire →
Kubernetes
SCHEDULER GAINS PREQUEUING FILTER, KUBELET USER NAMESPACES MOVE TO BETA
Kubernetes tackles the pod requeue bottleneck that's been choking large clusters, while user namespacing ships closer to production.
read --wire →
Go
PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26
The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.
read --wire →
CachyOS
INSTALLER REFACTOR TAKES SHAPE, PACKAGE UPDATES ROLL STEADY
CachyOS is modernizing its CLI installer with a comprehensive typed partition system overhaul while maintaining smooth automation across the AUR-derived package repository.
read --wire →
Linux
KERNEL PATCHES CLOSE NAMESPACE PRIVILEGE ESCALATION GAPS IN TUNNEL DRIVERS
Two critical fixes close a privilege escalation hole in VXLAN and GENEVE tunnel changelink operations that allowed unprivileged callers in one namespace to rewrite devices whose underlay lives elsewhere.
read --wire →
Arch Linux
KEYCHAIN 3.0 LANDS IN TESTING, ARCHINSTALL TIGHTENS VALIDATION
Arch's package repos are moving fast: keychain climbs to 3.0.0, Deno reaches 2.9.4, and archinstall ships critical validator fixes across Pydantic models.
read --wire →
HashiCorp
VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0
Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.
read --wire →
Kubernetes
CLUSTER-AUTOSCALER PATCHES HIT ALL RELEASE BRANCHES AS DRA AND VOLUMEMOUNT BIND OPTIONS LAND
Cluster-autoscaler shipped four patch releases across versions 1.33 through 1.36 fixing ProvisioningRequest condition application and Scaleway node detection, while Kubernetes core merged DRA node operations and volumeMount bind mount options.
read --wire →
Go
GO REWORKS HTTP/3 REGISTRATION, KILLS GLOBAL STATE IN MODULE LOADER
Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.
read --wire →
CachyOS
BRAVE BROWSER SOURCES SHIFT TO APT, GAME RULES SURGE, GERMAN WIKI TRANSLATIONS ACCELERATE
CachyOS is consolidating Brave packaging around apt sources while ananicy-rules absorbs a massive gaming ruleset expansion and the wiki team pushes German localization across multiple docs.
read --wire →
Linux
WATCHDOG UAF AND DIVISION-BY-ZERO FIXES LAND IN V7.2-RC5
Linus merged critical watchdog subsystem patches addressing a use-after-free vulnerability and a zero-division crash that could tank embedded systems in production.
read --wire →