Arch Linux
YARA GRADUATES TO STABLE, THREE SECURITY TOOLS CLEAR TESTING
Yara, the malware analysis engine, moved from testing to production overnight alongside two other security utilities that cleared QA.
read --wire →
$ tail -f topics/infra.log
Infrastructure news, every morning.
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
Your week in Infrastructure, every Monday.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Recent wires
HashiCorp
NOMAD ECOSYSTEM CUTS NIGHTLY BUILDS ACROSS THREE CORE PROJECTS
HashiCorp's orchestration and autoscaling tools are now shipping daily development snapshots, giving operators a faster path to test unstable features before official release.
read --wire →
Kubernetes
KOPS FIXES CASCADING GCP RESOURCE DELETION BUG AS HEALTH CHECK RECONCILIATION LANDS
KOps shipped critical fixes for GCP backend service ownership filtering that was causing infinite delete loops when clusters coexist with GKE, while simultaneously landing health check reconciliation logic across both GCP and AWS.
read --wire →
Go
AMD64 COMPILER BUG FIXED AFTER MISSCOMPILATION REPORTS
The Go compiler shipped a critical fix for an AMD64 code generation bug that was producing incorrect conditional logic in compiled binaries.
read --wire →
Linux
DRM FIXES LAND, PINCTRL REVERTS BROKEN AMD PATCH
Dave Airlie merged graphics fixes across colorop, amdgpu, and misc drivers while pinctrl backed out a botched AMD touchscreen fix that was causing more problems than it solved.
read --wire →
Arch Linux
ARCHINSTALL FIXES PLYMOUTH THEME SELECTION BUG, DENO SHIPS 2.8.3
The installer's Plymouth theme menu now actually remembers your selection when you reopen it.
read --wire →
HashiCorp
TERRAFORM GOOGLE PROVIDER LANDS APIGEE CREDENTIALS FIX AND NETWORK UPGRADES
The Terraform Google provider re-landed a critical Apigee feature that was reverted months ago, while simultaneously shipping network and artifact registry enhancements across both stable and beta channels.
read --wire →
Kubernetes
WATCHCACHE REFACTOR LANDS ALONGSIDE KOPS 1.36 BETA AND SERVICE NAME RELAXATION
The apiserver watchCache got a major internal refactor to fix concurrent mutation bugs, while kops shipped its first beta release of 1.36 and Kubernetes promoted relaxed service naming rules to GA.
read --wire →
Go
GO 1.27 RELEASE NOTES LOCKED IN AS COMPILER HARDENS AGAINST EDGE CASES
The Go website team is putting the final polish on 1.27 documentation while the compiler team squashes subtle bugs in SIMD transforms, Windows path handling, and generic method inference.
read --wire →
Linux
S390 PERFORMANCE FIX LANDS, NETWORKING AND GPIO CLEANUP CONTINUES
The kernel killed a massive s390 performance regression by removing an obsolete lock contention handler that had been haunting the architecture since PREEMPT became mandatory.
read --wire →
Arch Linux
SHOW-AUR-CHANGES GETS POWER TOOLS, FIVE-PACKAGE BATCH LANDS
The contrib toolchain shipped new filtering and output control for AUR change tracking, while the package repos absorbed five routine updates across staging and stable branches.
read --wire →
HashiCorp
TERRAFORM ENTERPRISE GETS SCIM SUPPORT AND POLICY DELEGATION
The terraform-provider-tfe v0.78.0 release ships SCIM provisioning and token management alongside a new project notification resource, giving enterprises tighter control over identity and governance.
read --wire →
Kubernetes
ETCD STREAMING LANDS IN APISERVER, KSM PATCHES CRITICAL GOLANG VULNS
Kubernetes apiserver is shipping etcd RangeStream support with proper metrics instrumentation, while kube-state-metrics dropped an emergency security release addressing high-severity Go vulnerabilities.
read --wire →
Go
GOLANG TIGHTENS GODEBUG ENFORCEMENT, COMPILER IMPROVES STRUCT LITERAL ERRORS
Go runtime now crashes at startup if you're still using a removed GODEBUG setting, forcing migration off deprecated flags before your code ships.
read --wire →
Linux
KERNEL RC8 LOCKS DOWN NAMESPACE MOUNTS, RISC-V AND POWER FIXES LAND
The kernel is tightening namespace security while Arch's installer learns to handle missing keyrings and Wayland compositor startup.
read --wire →
Arch Linux
BASH GRADUATES TO STABLE, CORE STACK SOLIDIFIES
Bash moved from testing to core [ref:3], signaling the shell update is ready for production systems across the board.
read --wire →
HashiCorp
TERRAFORM PROVIDER SURGE: AZURERM FIXES CRITICAL SQL MIGRATION, AWSCC SHIPS 35+ NEW RESOURCES
Azure's managed SQL instance now safely transitions between SKU tiers, while AWS CloudControl adds 35 new data sources and resources in a single release.
read --wire →
Kubernetes
KUBERNETES 1.37 ALPHA SHIPS AS CORE GAINS DECLARATIVE VALIDATION FRAMEWORK
The Kubernetes project is moving validation logic into API type definitions themselves, eliminating runtime panics and making it harder to ship broken schemas.
read --wire →
Go
TYPES RECEIVER BUG FIXED, ARM64 COMPILER ISSUES PATCHED
The Go compiler lands three critical fixes overnight while gopls gains generic interface support and VS Code extension v0.54.0 ships with interactive code actions.
read --wire →
Linux
KERNEL HITS MEMORY CORRUPTION BUG IN RDMA, RUNTIME VERIFIER FIXES CRITICAL OUT-OF-BOUNDS
DMA block sizes over 4GB corrupt memory across all RDMA drivers, forcing an immediate patch before any MR setup operations.
read --wire →