ContentPosts from @faun..
Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

Kernel-level container insights: Utilizing eBPF with Cilium, Tetragon, and SBOMs for security

eBPF, Cilium'sTetragon, andSBOMsare the dream team for exposing real-time kernel-level drama inside containers. When these powers combine, they hunt down surprise breaches likeLog4Shellwith a sleuth's precision. Bonus: they shave off20%fromCPU usagewhile they're at it... read more  

Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

What Would a Kubernetes 2.0 Look Like

Kubernetesrewrites the rulebook on infrastructure. Suddenly, scaling isn't a headache—it's an art. But then there'sYAML. With its peculiar quirks and knack for screwing up, it feels more like a punchline than a solution. EnterHelmand its template circus, juggling dependencies with all the grace of a.. read more  

What Would a Kubernetes 2.0 Look Like
Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

Why Chose OCI Artifacts for AI Model Packaging

Docker Model Runner injects LLMs into OCI artifacts, seamlessly marrying model delivery with container rituals. No need to invent custom toolchains. Think uncompressed "layers"—they're the secret sauce for faster, sharper, more efficient Model-Runner magic. It's not just a change; it's a quantum lea.. read more  

Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

GKE Data Cache, now GA, accelerates stateful apps

GKE Data Cachesupercharges PostgreSQL on GKE. Imagine squeezing out480% more transactions per secondand slashing latency by80%. It's like a balancing disk on steroids—Qdrant search gets a10xboost, even without cramming everything into memory. Impressive, right?.. read more  

GKE Data Cache, now GA, accelerates stateful apps
Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

NSEnter and Kubernetes

nsenteris your backstage pass to aKubernetesnode. It plays with Linux namespaces, crashing through isolation walls for a direct look inside. Summon it withPID1 and proper permissions, and you're deep in the node's core. No middleman required... read more  

NSEnter and Kubernetes
Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

How We Designed Model Runner and What’s Next

Docker's just unleashed a new gadget with Desktop4.40. Meet theModel Runner, your ticket to running AI models on your local machine. Imagine it as the Peacekeeper of container-host diplomacy. It’s powered byllama.cppand can ride GPUs like a pro skater. Oh, and it plays nice with theOpenAI API. Model.. read more  

How We Designed Model Runner and What’s Next
Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

State of App Dev: Security

Securityisn’t just for the IT crowd anymore. Everyone's on duty.Only 1%of developers bother to look the other way. A mere20%of organizations throw money at outsiders to handle it. The real trip wire? Planning. It derails teams faster than you'd believe... read more  

Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

AWS’ EKS Kubernetes ‘Critical Security’ Flaw Exposes Credentials, Says Trend Micro

Trend Microblows the lid off Amazon's EKS snafu—misconfigured Kubernetes containers brazenly leaking AWS credentials. Cue privilege escalation chaos. AWS shrugs, hiding behind the "Shared Responsibility" mantra. Trend Micro, undeterred, sounds the alarm: secure those configurations, and embrace the .. read more  

AWS’ EKS Kubernetes ‘Critical Security’ Flaw Exposes Credentials, Says Trend Micro
Link
@faun shared a link, 6 months, 3 weeks ago
FAUN.dev()

F5, Inc Announces New Capabilities for F5 BIG-IP Next for Kubernetes

F5, Inc. announced new capabilities for F5 BIG-IP Next for Kubernetes in collaboration with NVIDIA Corporation. The F5 BIG-IP Next for Kubernetes will be accelerated with NVIDIA’s BlueField-3 DPUs and the NVIDIA DOCA software framework... read more  

Link
@faun shared a link, 6 months, 4 weeks ago
FAUN.dev()

Poison everywhere: No output from your MCP server is safe

Anthropic's MCPmakes LLMs groove with real-world tools but leaves the backdoor wide open for mischief. Full-Schema Poisoning (FSP) waltzes across schema fields like it owns the place.ATPAsneaks in by twisting tool outputs, throwing off detection like a pro magicians’ misdirection. Keep your eye on t.. read more  

Poison everywhere: No output from your MCP server is safe