$ tail -f topics/infra.log
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Linux
BPF kfuncs can now access arena pointers directly after the kernel lands fault recovery on scratch pages, while the networking stack continues its multi-cycle assault on rtnl_lock contention.
read --wire →
Arch Linux
Language server and plugin suite hit 2.3.0.0 in extra-staging, closing the version gap that's been fragmenting the Haskell ecosystem.
read --wire →
HashiCorp
Nomad Autoscaler now ships with native Instana APM integration while the Podman driver gains fine-grained image platform selection.
read --wire →
Kubernetes
Kubernetes is purging three deprecated API versions ahead of 1.37 release while kOps moves fast to align with Karpenter v1 semantics and drops support for obsolete master node labels.
read --wire →
Go
The encoding/json/v2 rewrite is renaming its `inline` tag option to `embed` to avoid conflicts with existing Go code that already uses `inline` for different purposes.
read --wire →
Linux
Kernel 7.2 ships a fundamental rework of io_uring's task scheduling that eliminates O(n) list reversals on every run, while NVMe gets fine-grained per-controller timeout knobs.
read --wire →
Arch Linux
Arch's signing infrastructure underwent a breaking refactor that rearchitects how authenticated commands chain together, while the Haskell stack rippled with coordinated updates across Yesod and its dependents.
read --wire →
HashiCorp
HashiCorp rolled fresh nightly snapshots across both Nomad Pack and the Podman driver, giving operators early access to unreleased features and bug fixes.
read --wire →
Kubernetes
Kops decouples APIServer from local Etcd with load balancer support [ref:1], while core Kubernetes scrubs deprecated libraries ahead of the 1.36 release.
read --wire →
Go
Go's HTTP/2 implementation now validates server SETTINGS frames against stream flow limits, closing a potential vector for limit violations [ref:2].
read --wire →
Linux
Intel's TDX confidential computing now supports in-place security updates without reboots, joining a wave of x86 hardening that lands across encrypted VM architectures.
read --wire →
Arch Linux
Arch's web infrastructure is now exposing structured release data through a modern REST API with full OpenAPI documentation and Swagger UI.
read --wire →
HashiCorp
A critical bug in Consul server rejoining after maintenance leaves clusters unable to find their Raft leader, breaking peer lookups and causing silent failures across production.
read --wire →
Kubernetes
Kubernetes is locking in its networking overhaul while shipping major scheduler and API surface enhancements for 1.37, signaling a fundamental shift in how the cluster routes traffic and scales workloads.
read --wire →
Go
gopls is enforcing strict flag ordering for subcommands [ref:2] while golang/image ships three separate security fixes addressing memory exhaustion and potential crashes in TIFF and WebP decoders [ref:14] [ref:15] [ref:16].
read --wire →
Linux
Christian Brauner merged five major VFS subsystem overhauls into 7.2-rc1 that rearchitect extended attributes, expose filesystem case behavior to network servers, and fix critical race conditions in writeback handling.
read --wire →
Arch Linux
The rsync-ssl blocker that's been holding back OpenSSL updates across infrastructure is finally resolved, clearing the path for security patches.
read --wire →
HashiCorp
Packer's hcp-sbom provisioner just ditched the external binary dependency game and baked Syft directly into the build engine.
read --wire →
Kubernetes
The core Kubernetes API machinery bumped a minor version while test infrastructure pivoted cloud-provider-azure's IPv6 and dual-stack jobs to an upstream fix not yet backported to release branches.
read --wire →
Linux
Wolfram Sang is stepping down as I2C maintainer after leading the subsystem since 2010, handing control to Andi Shyti just as the kernel enters its final release candidate cycle with critical fixes across clock drivers and core debugging.
read --wire →
