Drowning in AI slop, cURL ends bug bounties
Daniel Stenberg, founder and lead developer of cURL, has had enough of AI slop and is closing down its bug bounty program.
1_r/devopsish
Docker lazy loading at Grab: Accelerating container startup times
Large container images were causing slow cold starts and poor auto-scaling for Grab's data platforms. This post explores how we implemented Docker image lazy loading with Seekable OCI (SOCI) technology, to achieve faster image pulls and startup times. The blog discusses how lazy loading works, the technology behind SOCI and eStargz, and finally how this configuration delivered a 60% improvement in download times.
Expose your local server to the public internet instantly | Glama
pipenet is a tunneling tool that creates a secure connection between your local machine and the public internet. Run a single command, and you'll get a public URL that forwards traffic directly to your localhost.
tobi/qmd: mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local
mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local - tobi/qmd
pompelmi/pompelmi: free, open-source file scanner
free, open-source file scanner. Contribute to pompelmi/pompelmi development by creating an account on GitHub.
Last Week in Kubernetes Development - Week Ending January 18 2026
Week Ending January 18, 2026
https://lwkd.info/2026/20260122
Developer News
SIG Windows is nominating Yuanliang Zhang and Jose Valdes as the new co-chairs. Aravindh Puthiyaparambil and Mark Rossetti will be stepping down from their roles as co-chairs while Mark Rossetti will continue on as technical lead. Thank you for your service and congrats to the newly elected chairs!
Patrick Ohly has proposed to spin down WG Structured Logging since most of the work has moved to different SIGs now. Thanks everyone who has helped modernizing logging in Kubernetes!
The SIG Node KEP Wrangling program is looking for volunteers for the v1.36 release. Sign up if you’re interested to work with KEP authors and SIG leads to ensure that deadlines are met and KEPs progress in a timely manner for the v1.36 release. Please reach out in the #sig-node-wranglers channel in Slack if you have any questions.
Release Schedule
Next Deadline: PRR Freeze, February 4
Kubernetes v1.36 call for enhancements is open! If you want your KEP to go in the v1.36 cycle, talk to your SIG leads and get the lead-opted-in label. Make sure that your KEP meets the PRR freeze requirements before February 4th.
The January 2026 patch releases remain delayed since the Go team issued new security releases, and the team is now wrapping up the necessary updates before cutting the patches.
Featured PRs
136086: Graduate watch_list_duration_seconds to Beta
This PR graduates the watch_list_duration_seconds metric from Alpha to Beta, signaling stability and long-term support. The metric provides improved observability into watch list performance and is now suitable for broader production use and alerting.
136117: Add utilities to allow strategy.go files to enable DV native validations
This PR adds utilities that allow Kubernetes API strategy implementations to opt into Declarative Validation (DV) native rules. It strengthens API correctness by ensuring declarative validations are consistently enforced for new APIs while preserving feature gate semantics.
KEP of the Week
KEP-5295: Introducing KYAML, a safer, less ambiguous YAML subset / encoding
This KEP proposes introducing KYAML, a new kubectl output format that is a strict, safer subset of YAML designed to avoid common YAML pitfalls. KYAML is not whitespace-sensitive, making it easier to edit and patch reliably, especially in tools like Helm. The proposal also recommends making KYAML the standard format for Kubernetes documentation and examples. The motivation is to reduce errors caused by indentation, implicit type coercion, and other confusing YAML behaviors while still remaining compatible with existing YAML tooling.
This KEP graduated to beta in v1.35.
Other Merges
Fix log verbosity level in apiserver
client-go: fake client-go (i.e. anything using k8s.io/client-go/testing) now supports separate List+Watch calls
Drop TopologyAwareHints and ServiceTraficDistribution feature gates
kubeadm: waiting for etcd learner member to be started before promoting during ‘kubeadm join’
client-go: Informer resync processing improved handling of Resync handling
Fix scheduler_unschedulable_pods metric leak when pods fail PreEnqueue plugins
kubctl: Change the default debug profile from legacy to general
Add Declarative Validation to Workload API
kubectl: Fix deleting multiple StatefulSet pods to exit normally
Add the appProtocol field to the service describe output
kubelet: Fix data race in volume manager during concurrent pod unmount operations
client-go: Informers now update store state before calling handlers, ensuring handlers see consistent resource versions
Scheduler: PreBind plugins can now run in parallel to improve binding latency.
Promotions
watch_list_duration_seconds to beta
Version Updates
Go to 1.25.6
golang.org/x/crypto to v0.47.0
github.com/golang-jwt/jwt/v5 to v5.3.0
golang.org/x/net to v0.49.0
go.uber.org/zap to v1.27.1
github.com/godbus/dbus/v5 to v5.2.2
Subprojects and Dependency Updates
node-readiness-controller released v0.1.1 with initial implementation of the Node Readiness Controller
Controller-Runtime released v0.23.0. Highlights include subresource Apply support, conversion webhook implementation being possible outside of api packages, the PriorityQueue being enabled by default and enabling generic Validators and Defaulters in the webhook.
coreDNS v1.14.1 focuses on security fixes for vulnerabilities in older Go versions, improves proxy plugin performance with multiplexed connections, and includes documentation updates.
cluster-api v1.12.2 adds Kubernetes support up to v1.35.x, includes several ControlPlane, ClusterClass, and Runtime SDK fixes, and updates Go and core dependencies.
cluster-api v1.11.5 extends support to v1.34.x with targeted fixes in ControlPlane, ClusterClass, KCP permissions, and Runtime SDK cert rotation.
kompose v1.38.0 focuses on maintenance, with dependency updates, CI improvements, and bug fixes, including better macOS and Podman test compatibility.
openstack-cloud-controller-manager 2.34.2 and openstack-cinder-csi 2.34.2 update the Helm charts for the OpenStack Cloud Controller Manager and Cinder CSI driver, respectively.
Shoutouts
Josh Berkus: Kudos to @Swathi Rao for doing a great job organizing comms to publicize the NCO.
Swathi Rao: Shoutout to @Avni for reaching out to SIGs for good first issues and curating them. We got some great responses from 3 this month!
via Last Week in Kubernetes Development https://lwkd.info/
January 22, 2026 at 04:12AM
He Left OpenAI To Think Bigger - EP 53 Jerry Tworek
Are all the AI superpowers playing it too safe?
Measuring contributor affiliations is complicated - Duck Alignment Academy
Determining a contributor's affiliation is not as easy as it seems. It's not always clear if a contribution is part of someone's job.
KubeCon Exhibiting for Success: A Simple 3-Phase Plan
KubeCon is expensive. When you add up the booth fees, travel, time onsite, and the cost of pulling your team away from their day jobs, the price tag is real.
Last Week in Cloud Native - Weekly Cloud Native Newsletter
Weekly newsletter covering Cloud Native releases, Kubernetes news, and CNCF ecosystem updates. Stay informed about the latest in the CNCF ecosystem, including Kubernetes, Helm, ArgoCD, and more.
What Is Kubernetes Networking?
Kubernetes networking is the system that allows pods, services, nodes, and external resources to communicate inside a Kubernetes cluster. It provides a flat network structure that gives each pod its own IP address and allows traffic to move across worker nodes without network address translation. This simple networking model supports cloud native applications, microservices, and distributed systems that require reliable network communication. Networking in Kubernetes is built on the Container Network Interface, also known as CNI, which configures pod networking and ensures correct routing and connectivity.
Before Your Agent Books a Vacation, It Has to Learn to Scroll
How to write a great agents.md: Lessons from over 2,500 repositories
Learn how to write effective agents.md files for GitHub Copilot with practical tips, real examples, and templates from analyzing 2,500+ repositories.
💥 I did a drawing that breaks down Transformers in AI
Spent a good amount of time on this one, breaking down concepts in a way that someone new to the subject could come away with basic high-level understanding. I hope it's useful!
Managing Secrets in Configuration Files with SOPS
Tired of `.env` files and worried about leaking API keys in your Git repository? There's a better way. In this quick guide, we break down SOPS (Secrets OPera...
Personal infrastructure setup 2026
While starting this post I realized I have been maintaining personal infrastructure for over a decade!
Most of the things I’ve self-hosted is been for personal uses. Email server, a blog, an IRC server, image hosting, RSS reader and so on. All of these things has all been a bit all over the place and never properly streamlined. Some has been in containers, some has just been flat files with a nginx service in front and some has been a random installed Debian package from somewhere I just forgot.
How I Taught GitHub Copilot Code Review to Think Like a Maintainer - Angie Jones
Say what you want about vibe coding, but it's been great for open source. Contributing to unfamiliar codebases used to be daunting, which meant maintainers of open source projects received very little community help no matter how popular the project was. But now with AI coding tools, the barrier to contribute is much
CNCF Annual Cloud Native Survey
Blog: Announcing the Checkpoint/Restore Working Group
Blog: Announcing the Checkpoint/Restore Working Group
https://www.kubernetes.dev/blog/2026/01/21/introducing-checkpoint-restore-wg/
The community around Kubernetes includes a number of Special Interest Groups (SIGs) and Working Groups (WGs) facilitating discussions on important topics between interested contributors. Today we would like to announce the new Kubernetes Checkpoint Restore WG focusing on the integration of Checkpoint/Restore functionality into Kubernetes.
Motivation and use cases
There are several high-level scenarios discussed in the working group:
Optimizing resource utilization for interactive workloads, such as Jupyter notebooks and AI chatbots
Accelerating startup of applications with long initialization times, including Java applications and LLM inference services
Using periodic checkpointing to enable fault-tolerance for long-running workloads, such as distributed model training
Providing interruption-aware scheduling with transparent checkpoint/restore, allowing lower-priority Pods to be preempted while preserving the runtime state of applications
Facilitating Pod migration across nodes for load balancing and maintenance, without disrupting workloads.
Enabling forensic checkpointing to investigate and analyze security incidents such as cyberattacks, data breaches, and unauthorized access.
Across these scenarios, the goal is to help facilitate discussions of ideas between the Kubernetes community and the growing Checkpoint/Restore in Userspace (CRIU) ecosystem. The CRIU community includes several projects that support these use cases, including:
CRIU - A tool for checkpointing and restoring running applications and containers
checkpointctl - A tool for in-depth analysis of container checkpoints
criu-coordinator - A tool for coordinated checkpoint/restore of distributed applications with CRIU
checkpoint-restore-operator - A Kubernetes operator for managing checkpoints
More information about the checkpoint/restore integration with Kubernetes is also available here.
Related events
Following our presentation about transparent checkpointing at KubeCon EU 2025, we are excited to welcome you to our panel discussion and AI + ML session at KubeCon + CloudNativeCon Europe 2026.
Connect with us
If you are interested in contributing to Kubernetes or CRIU, there are several ways to participate:
Join our meeting every second Thursday at 17:00 UTC via the Zoom link in our meeting notes; recordings of our prior meetings are available here.
Chat with us on the Kubernetes Slack: #wg-checkpoint-restore
Email us at the wg-checkpoint-restore mailing list
via Kubernetes Contributors – Contributor Blog https://www.kubernetes.dev/blog/
January 20, 2026 at 07:00PM
10 things I learned from burning myself out with AI coding agents
Opinion: As software power tools, AI agents may make people busier than ever before.
Hand Mirror, for Mac
A one-click camera check, right from the menu bar
Looking for a new role
Looking for a new role
https://chrisshort.net/micro/looking-for-a-new-role-2026/
30-year tech veteran seeking remote Developer Advocate or Technical Marketing role. Translates complexity into adoption. Available now.
via Chris Short https://chrisshort.net/
January 20, 2026
Bring Back Ops Pride
"Operations" is not a dirty word, a synonym for toil, or a title for people who can't write code. May those who shit on ops get the operational outcomes they deserve.
Rackspace customers grapple with “devastating” email hosting price hike
Reseller says Rackspace plans to charge it 706 percent more.
Just the Browser - Just the Browser
Remove AI features, telemetry data reporting, sponsored content, product integrations, and other annoyances from web browsers.
How Nvidia is using emulation to turn AI FLOPS into FP64
: AMD researchers argue that, while algorithms like the Ozaki scheme merit investigation, they're still not ready for prime time.
Anthropic’s Claude Cowork Is an AI Agent That Actually Works
Cowork is a user-friendly version of Anthropic’s Claude Code AI-powered tool that’s built for file management and basic computing tasks. Here’s what it's like to use it.
jQuery 4.0.0 | Official jQuery Blog
jQuery: The Write Less, Do More, JavaScript Library
Private AI Coding: OpenCode + Model Runner | Docker
Configure OpenCode to use Docker Model Runner for a private, cost-aware coding assistant. Run models locally via an OpenAI-compatible API with full control.
iOfficeAI/AionUi: Free, local, open-source Cowork for Gemini CLI, Claude Code, Codex, Opencode, Qwen Code, Goose Cli, Auggie, and more | 🌟 Star if you like it!
Free, local, open-source Cowork for Gemini CLI, Claude Code, Codex, Opencode, Qwen Code, Goose Cli, Auggie, and more | 🌟 Star if you like it! - iOfficeAI/AionUi