Kubernetes
SIG Storage co-chair transition, PodSchedulingReadiness gate removed
Kubernetes removed the PodSchedulingReadiness feature gate and rotated SIG Storage leadership while CI hardening shipped in the release repo.
read --wire →
$ tail -f topics/infra.log
Infrastructure news, every morning.
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
Your week in Infrastructure, every Monday.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Recent wires
Go
Go compiler drops unnecessary riscv64 masking and hardens SIMD codegen
Go's compiler removes redundant shifts on riscv64 and stops SIMD zeros from implying AVX support, tightening codegen correctness on older CPUs.
read --wire →
CachyOS
Linux 7.3-rc1 kernels land, NVIDIA convertible fix ships
CachyOS released its 7.3-rc1 kernels and patched NVIDIA PRIME profile detection for 2-in-1 convertibles.
read --wire →
Linux
Cgroup kill fix, EDAC orphanings land in 7.3-rc2
Two merge batches hit Linux 7.3-rc2: a cgroup SIGKILL fix and EDAC driver updates.
read --wire →
Arch Linux
archinstall patches archiso workflow after broadcom-wl removal
Archinstall ships a temporary fix for the archiso workflow, blocking production until archiso either drops broadcom-wl or the repo restores it.
read --wire →
HashiCorp
Consul CNI tolerations now configurable, Nomad plan diff sorts args numerically
Consul CNI DaemonSet tolerations become configurable via Helm, while Nomad fixes plan diff ordering for array indices.
read --wire →
Kubernetes
v1.37 docs regenerate; JobManagedBy gate dropped
Kubernetes moved v1.37 API references through the docs pipeline and deleted the JobManagedBy feature gate, which signals cleanup ahead of the release.
read --wire →
Go
Compiler inlines recover, http.Transport.CancelRequest becomes a no-op
Go's compiler now inlines functions that call recover, and net/http deprecates Transport.CancelRequest to a no-op.
read --wire →
CachyOS
Linux 6.18.48 rolls out with Apple T2 fixes
CachyOS shipped two kernel releases based on Linux 6.18.48, adding the apple-bce driver and addressing camera-freeze issues on Apple T2 hardware.
read --wire →
Linux
OpenSSH 10 hardening failure and security policy land across omarchy
omarchy's SSH hardening now works on OpenSSH 10.x, and the project added a security policy, while the kernel pulls in Coccinelle and ARM fixes.
read --wire →
Arch Linux
Routine package bumps and archinstall lint cleanup
A quiet day: five extra-x86_64 package updates landed in archlinux/state, while archinstall tightened its linting and pre-commit setup.
read --wire →
HashiCorp
Consul fixes js-yaml and nanoid vulnerabilities
Consul patched security vulnerabilities in js-yaml and nanoid while CODEOWNERS updates land across three Terraform repos.
read --wire →
Kubernetes
krel signs attestations, watch cache metric stopped counting bookmarks
The Kubernetes release pipeline now signs provenance attestations with a second identity, and the watch cache stops inflating its dispatch metric.
read --wire →
Go
ssh CheckCert now enforces source-address, semaphore rejects negative capacity
Go's crypto and sync libraries shipped fixes that close a host-key verification gap and reject misconfigured semaphores.
read --wire →
CachyOS
CachyOS kernel 7.2 gains Broadcom Wi-Fi DKMS fix
CachyOS pushed a DKMS fix for Broadcom wireless on the 7.2 kernel, ending the build failure for affected modules.
read --wire →
Linux
SCSI merge closes, Plymouth and SDDM publication hardened
Linus pulled the remaining SCSI updates for the 7.3 merge window while omarchy ships a wave of security fixes for boot-time asset publication.
read --wire →
Arch Linux
Arch testing promotions roll out; archinstall tightens linting
Four packages moved from Arch's testing repositories to stable, and archinstall enabled a Pylint warning that catches a classic Python bug.
read --wire →
HashiCorp
Nightly snapshots ship for nomad-driver-podman and nomad-pack
Both HashiCorp plugins published nightly releases today, giving users a preview of upcoming features and fixes.
read --wire →
Kubernetes
kOps 1.37.0-beta.1 makes nodeup.xz canonical; test-infra drops Debian 11
kOps released v1.37.0-beta.1 and made nodeup.xz the canonical release artifact, while test-infra dropped support for EOL Debian 11.
read --wire →
Go
cmd/goimports skips an lstat per file
goimports ships a hidden performance win: cmd/goimports now uses filepath.WalkDir instead of filepath.Walk, cutting one lstat per directory entry.
read --wire →