$ tail -f topics/infra.log
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Linux
The kernel patched a critical use-after-free in KVM's x86 shadow MMU that has been exploitable since the first KVM series shipped — a bug that only surfaces when guest page tables change between VM entries.
read --wire →
Arch Linux
The installer is pulling its textual UI module up one level while Finnish translations hit 100% coverage, signaling a maturation push across the distribution tooling.
read --wire →
Kubernetes
Kubernetes is shipping critical networking fixes for production deployments while closing two high and medium severity vulnerabilities in core observability tooling.
read --wire →
Linux
The kernel plugged critical memory leaks and a NULL pointer dereference in NTFS [ref:1], while crypto subsystem now rejects weak authentication algorithms at instantiation time [ref:2].
read --wire →
Arch Linux
Archinstall shipped a cleanup that removes a profile that's been breaking installations since day one, while core libraries move out of testing into production.
read --wire →
HashiCorp
HashiCorp's Nomad orchestration stack pushed three nightly snapshots overnight, signaling active development across autoscaling, Podman integration, and deployment packaging.
read --wire →
Kubernetes
Kubernetes' infrastructure just got lighter: kops release binaries are now 25–29% smaller, and the test grid is standardizing on VPC CNI prefix delegation for every supported Linux distro.
read --wire →
Go
The Go team just landed a fundamental refactor of the register mask system that unblocks support for architectures with more than 64 registers.
read --wire →
Linux
The kernel just plugged a use-after-free in futex allocation that was corrupting shared memory contexts, while graphics drivers landed their heaviest rc2 patch set in weeks.
read --wire →
Arch Linux
Arch purged the oil package from extra-x86_64 while three major kernel and driver updates advance through the staging pipeline.
read --wire →
HashiCorp
Both the stable and beta Terraform Google providers are mid-migration away from legacy client patterns, replacing BasePath usage and moving to direct HTTP transport across compute, SQL, and resource management services.
read --wire →
Kubernetes
The core validation framework just got smarter about matching errors across Declarative and legacy Handwritten validation systems, unblocking a cleaner path forward without high-risk rewrites.
read --wire →
Go
Go's TLS test suite now actually catches errors it was silently dropping, while the compiler trims fat and JSON encoding ditches generics that were creating more problems than they solved.
read --wire →
Linux
The kernel is tightening up core subsystems ahead of 7.1 final, with ACPI, networking, and storage all shipping targeted fixes overnight.
read --wire →
Arch Linux
Five core mapping and graphics libraries are rolling through staging simultaneously—watch for dependency ripples when these hit stable.
read --wire →
HashiCorp
Boundary shipped emergency security updates across v0.19, v0.20, and v0.21 to address four critical PostgreSQL driver vulnerabilities that could affect every deployment.
read --wire →
Kubernetes
Kubernetes core stripped two legacy authorization feature gates [ref:3] while validation-gen tooling tightened test coverage for zero-value and optional field handling [ref:2].
read --wire →
Go
golang/net shipped wrapped HTTP/2 Server and ClientConn implementations while the core runtime quietly fixed a cascade of platform-specific test failures.
read --wire →
