Peter Rossbach

Helm CEL is a Helm plugin that leverages Common Expression Language (CEL) to validate values, offering a more expressive and flexible alternative to traditional JSON Schema validation ➜ ku.bz/dhWP3Vk7q

k8s-bootstrap generates GitOps-ready Kubernetes cluster configurations through a web UI where you select components such as ingress controllers, security tools, and observability platforms ➜ ku.bz/f5HxM0CBt

zot is a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire ➤ ku.bz/fwXd6-TN9

How etcd works with and without Kubernetes learnkube.com/etcd-kubernetes

Uncloud is a lightweight clustering tool that deploys and manages containerized applications across Docker hosts using Docker Compose syntax ➜ ku.bz/VQC0VyVh-

Graham Helton has just published a disclosure of a Kubernetes vulnerability that allows running arbitrary commands in any pod in a cluster using a common "read-only" RBAC permission. And this vulnerability won't be assigned a CVE, meaning Kubernetes won't receive a fix 🤷‍♂️ grahamhelton.com/blog/nodes-pro… But there is a silver lining. Graham prepared a short auxiliary post that focuses specifically on the reproduction, and it's an iximiuz Labs tutorial: labs.iximiuz.com/tutorials/node… 💙 We definitely need more security researchers publishing exploit reproductions as code labs anyone can run and verify!

This article reveals hard-earned lessons on using Kubernetes Informers in large clusters, explaining informer fundamentals, handler design pitfalls, caching, memory optimization, and workqueue best practices for scalable controller code ➤ ku.bz/CxjFsDzdy

2025 year wrap-up for iximiuz Labs 🚀 - 21K+ new users (12K in 2024) - ~160K VMs fired up (x2 YoY) - 31K challenge submissions, 18K accepted - 830 playgrounds created - First net-positive year after ~3 years of bootstrapping Biggest features 🛠️ - Playgrounds 2.0 (multi-VM, multi-network, multi-disk, custom rootfs, kernel switcher) - Persistent playgrounds + instant clones - Coding-agent base playground - Markdown and YAML-powered, shareable playgrounds - Faster boots via SSH-over-VSOCK - Bigger & more reliable infra (AP region x3, EU region gets better servers) Content in 2025 📚 - 20+ tutorials (incl. a 5k-word deep dive on container filesystems) - ~40 public challenges (+50 private) - Hands-on Docker Roadmap launched - 7 skill paths (containers + eBPF) - ~50 trainer-led events, incl. 4 real-world university courses Business 📈 - $185K revenue in 2025 - ~3,000 Premium members - ~2,000 lifetime Premiums - Premium got cheaper (VAT-incl + PPP discounts) 2026 focus: content, content, content 🤓 - Finish Docker Roadmap - Two hands-on Kubernetes roadmaps - More networking fundamentals - Better content discovery, author profiles, creator monetization Looking back at what shipped in 2025, I'm convinced we've built enough momentum to make 2026 a truly exceptional year for the platform! 💪

Inside the Linux Kernel: The Art of Linux Kernel Compilation and Booting An in-depth guide to Linux kernel compilation and the boot process, exploring kernel configuration, build systems, and the intricate steps from bootloader to running system.

Scale your storage needs with a simple, self-hosted s3 alternative

#Kubernetes for #Java Developers: The Ultimate Quarkus + Minikube Quick Reference buff.ly/W8zhWCk

GitHub - openkube-hub/KubeUser: Kubernetes-native user management operator Lightweight Kubernetes-native user management operator that simplifies user authentication and authorization through declarative custom resources. github.com/openkube-hub/K…

More home lab inspiration for you today. This one is using Flux and Rook. Check it out ➡️ blog.nerdz.cloud/2025/talos-dr-…

GitHub - cr0hn/dockerscan: The Most Comprehensive Docker Security Scanner github.com/cr0hn/dockersc…

This project provides tools and code to build OCI-compatible container images directly inside Kubernetes clusters and containerized environments, without requiring a Docker daemon ➜ ku.bz/2Bl1tX8qc

Iximiuz Labs subscription is now on sale with a 70% discount. It's essentially the price of a coffee per month. If you're looking to enhance your skills in containers or networking, you won't find a better investment than this.

Docker Hands-On: Pass Environment Variables to Containers 🛠️ A container is an isolated and restricted "box" that runs your application. By definition, this means the env vars you set in your terminal won't be visible to the containerized app. Practice: labs.iximiuz.com/challenges/doc…

Persistent Playgrounds on iximiuz Labs 🚀 A video demo for now, and the release is on its way to production servers. It's a massive upgrade, but I'm hoping to be done with it by ~tomorrow afternoon🤞

W-JAX Spotlight: 🤖 Agentic RAG – @mobileLarson über Agentic AI + RAG ☁️ Cloud Native & Kubernetes – @PRossbach über digitale Souveränität & Open Source KI & Cloud im Gleichklang. #jaxcon #AI #CloudNative #Kubernetes

Supply Chain Security: SBOMs for Java Applications thomasvitale.com/supply-chain-s…