CachyOS
CachyOS Linux 7.2.2-1 ships with fragment fix and new branch
CachyOS Linux 7.2.2-1 lands, rebased on upstream 7.2.2 with a fix for inet frags and a new stable branch.
read --wire →
$ tail -f topics/infra.log
Infrastructure news, every morning.
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
Your week in Infrastructure, every Monday.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Recent wires
Linux
Omarchy closes two passwordless root-escalation paths in CUPS and browser policy
Omarchy shipped security fixes for two local privilege-escalation paths and a Qt QML auto-markup vulnerability this week.
read --wire →
Arch Linux
Kernel v7.2.2-arch1 adds sysctl to disable unprivileged CLONE_NEWUSER
Arch Linux released kernel v7.2.2-arch1 with a new sysctl that can disable unprivileged user namespaces, and archinstall improved its disk and config handling.
read --wire →
HashiCorp
AWS provider grows prefix allocations, Vertex AI drift fix lands
Terraform's AWS provider adds Direct Connect prefix allocation support, Google Beta fixes a Vertex AI read no-op, and both Nomad projects roll nightly snapshots.
read --wire →
Kubernetes
kops 1.37.0-beta.1, GCE teardown fixes, Karpenter validation
kops shipped 1.37.0-beta.1 with early Karpenter validation and GCE route and firewall cleanup fixes that stop cluster deletion from hanging.
read --wire →
Go
net/http aborts writes on dead connections, breaks solaris fuzz test
net/http now aborts in-flight response writes when the connection dies, fixing a Solaris hang, while a removed test skip breaks the solaris builder.
read --wire →
CachyOS
CachyOS kernel 7.2.1 ships with scheduler fix and RFU rebase
The flagship kernel release lands with a critical scheduler floor patch and a new upstream base.
read --wire →
Linux
CONTAINER ESCAPE FOLLOWS A SLASH
A typo in a web app name creates an unremovable launcher entry and a launcher directory escape in omarchy, while the kernel's rmap indexing gets a critical fix.
read --wire →
Arch Linux
KERNEL 7.3 MERGE WINDOW POURS IN
The merge window for Linux 7.3 is delivering a deluge of upstream patches, and Arch is on the receiving end.
read --wire →
HashiCorp
Nomad Cuts Pointer Boilerplate
Nomad drops its pointerOf helper and pins Go 1.26, a cleanup that signals the project is moving fast on modernization.
read --wire →
Kubernetes
kube-router modernizes, kOps gates breaking changes
kube-router's DaemonSet is getting a long-overdue modernization, while kOps stops trusting its own docs.
read --wire →
Go
unicode/norm composition bugs shake the foundation
Russ Cox landed a five-part fix for Unicode normalization that silently corrupted text, and gopls is hardening inlining, but the real headline is the type-checking cleanup rolling through go/types.
read --wire →
CachyOS
CachyOS Tuned Strikes: THP and Laptop Mode Out
The tuned project just killed laptop_mode and switched THP to always-on, a performance play that will hit every CachyOS desktop default.
read --wire →
Linux
NFS MERGE BRINGS CRITICAL STABILITY FIXES
Linus pulled NFS 7.3-1 with a slew of stable fixes that every maintainer should read before their next release.
read --wire →
Arch Linux
Node.js jumps to 26.8.1 across extra, signstar locks down YubiHSM keys
Arch's rolling release just got faster: Node.js 26.8.1 and a hardened signstar stack are the ones to watch today.
read --wire →
HashiCorp
Nomad Command Overhaul Leads Quiet HashiCorp Day
Nomad's command package gets a long-awaited modernization while the rest of the HashiCorp ecosystem focuses on contributor docs.
read --wire →
Kubernetes
KUBERNETES SHIPS V1.37 SNAPSHOT
Kubernetes 1.37 is here, and with it a wave of changes that will reshape your cluster tooling and security posture.
read --wire →
Go
Go Deprecates HTTP/2 Transport Direct Use
Damien Neil just deprecated the HTTP/2 Transport and Server in golang/net, signaling a major shift for Go's networking stack.
read --wire →
CachyOS
HANDHELD GAMING OVERHAUL: STEAMOS SESSION CONTROL LANDS
CachyOS is rewiring its handheld gaming stack so Steam's session management is treated as a first-class citizen, with a new steamosctl-powered switch to game mode.
read --wire →
Linux
KVM MERGE, FOUR SECURITY PATCHES: LINUX AND OMARCHY SHIP CRITICAL FIXES
Linux merges KVM and peripheral updates while Omarchy closes four security holes that let attackers execute Lua, control root SSH, and hijack FIDO2 auth.
read --wire →