Underkube

Two frontier model releases shared the week with a widening set of small decision models and agent runtimes, and with more reports on how coding agents are changing day-to-day development.

Agent infrastructure dominated the week: Kubernetes-native harnesses, a high-density sandbox runtime on GKE, and a 27B model compressed into under 6 GB.

A quieter week than the last one: open-weight audio tooling, Kubernetes checklists and Helm scanning, BSD install write-ups, a batch of homelab and SDR projects, and the Omarchy funding and vulnerability-disclosure threads.

Back from holidays, so this one covers everything that piled up over the last month: new model releases, Slurm on Kubernetes, a lot of BSD, the Omarchy funding argument, ADS-B receivers and a stack of retro and homelab projects.

A week of running LLM inference on your own Kubernetes clusters, a Secure Boot bypass that went unnoticed for a decade, terminal demo tooling, UPS dashboards and plenty of retro hardware.

A week of open-weight model routing and local AI tooling, OCI-backed package managers and registries, a Linux kernel CVE deluge, self-hosting mail and media, plus a good run of retro-computing and hardware rabbit holes.

A week of new open frontier models and AI CLI wire-level analysis, a 15-year-old Linux kernel privilege escalation, ZFS and FreeBSD tooling, plus plenty of hardware, SDR and retro-computing rabbit holes.

A week of DIY NAS builds and ZFS tooling, new frontier model releases from OpenAI and xAI, clever local inference tricks, and a couple of serious virtualization and AI-agent security stories.

A week centred on running LLMs locally, new model releases from Anthropic and the government vetting of others, a big Immich release and self-hosting tooling, a couple of unsettling disk-encryption and firmware stories, and reviving old hardware.

A week mixing local LLM tooling, terminal-driven virtualization, OCI registries and PXE boot servers, a few BSD and mobile Linux releases, and some hardware tinkering.

A week heavy on local LLM coding setups, token-trimming tooling, dotfile managers, ZFS self-hosting, and a couple of supply-chain security reminders.

An export directive on frontier AI models, an AI agent running amok in Fedora, GPU passthrough to keep Adobe on Linux, Apple’s container machines, and Steam running on a Nintendo Switch.

Running LLMs on a Game Boy Color and a £200 datacenter GPU, GPS jamming over Europe, npm supply chain compromise, aircraft tracking on your ceiling, and DOOM’s kryptonite: the Neo Geo.

Claude Opus 4.8 dropped and the Claude Code ecosystem exploded this week — undocumented configs, deep-dive guides, GitHub Actions, and tools to catch the slop agents leave behind.

Heavy FreeBSD week — a new kernel LPE (CVE-2026-45250), a decade-long Ubuntu migration story, and OpenBSD 7.9 out.

Busy week in AI agent land — Hermes Agent keeps growing, Anthropic’s Mythos finds a real CVE in curl, and dnsmasq ships fixes for six serious vulnerabilities.

Another Linux LPE in the wild, OpenAI launches ads in ChatGPT, and a solid batch of self-hosted tooling covering monitoring, photo sharing, and pastebins.

Big week: a no-race, 100% reliable Linux LPE hitting all major distributions, a flood of AI agent sandboxing content, and another wave of Claude Code tooling.

This week features a heavy focus on AI agent tooling and Claude Code in particular, a notable cluster of sandboxing and security links, fresh SDR and hardware hacking projects, and a few significant industry moments including Apple’s leadership change and…

This week’s highlights feature the latest in AI agent orchestration, local LLM accessibility on Apple hardware, and a nostalgic trip through classic Mac OS emulation and ports.

This week’s collection explores the latest in AI agent strategies, Linux security tools, and deep dives into LLM architectures.

After a refreshing week off on PTO, I’m back with a double-sized edition covering two weeks of interesting finds in the tech world.

A diverse week featuring deep dives into Btrfs scaling, a flurry of new AI agent control planes, and some critical security updates for CI/CD pipelines.

This week’s collection highlights the rapid advancement of local AI agent infrastructure, critical security advisories for Linux armor, and significant updates across the Kubernetes and FreeBSD ecosystems.

This week’s reading list is a mix of high stakes security post mortems, ranging from the XZ backdoor to recent GitHub Actions exploits, alongside the rapid evolution of the OpenClaw ecosystem and some surprising hardware moves from Apple.

This week’s roundup covers a wide range of topics, including the architectural limits of etcd, GPU-initiated networking, the nostalgic design of Apple’s breathing lights, and the surprising persistence of floppy disks in transit systems.

This week’s reading list is heavily focused on Kubernetes observability, AI orchestration, and some very handy tools for navigating the modern web.

This week’s roundup features 40 fresh links covering everything from sandboxing AI agents in Kubernetes to benchmarking LLMs in the game Balatro, along with some spicy open-source drama.

This week is a massive roundup.

While I try to cover everything from budget Kubernetes to BSD tricks, the star of the show this week is of course ClawdBot/MoltBot/OpenClaw.

Here is the roundup of links for this week: Cloud & Infrastructure Exe.dev - A service to spin up instant, publicly accessible virtual machines with persistent disks.

I missed last week’s post because I was too busy trying to beat my high score in UEFI Zaxxon.

I’ve gathered a fresh batch of links to kick off the new year, ranging from Kubernetes networking and BSD tools to security talks from the 39C3 congress.

Here is the roundup of links for this week: Cloud & Infrastructure Debusine Repositories Launch / Main Page: Debian introduces Debusine, a new PPA-like system allowing developers to publish add-on packages with integrated builds and testing.

Here is the roundup of links for this week: Cloud & Infrastructure Kubernetes v1.35 Release - The official announcement for the latest version of Kubernetes.

Here is the roundup of links for this week: Cloud & Infrastructure IBM to acquire Confluent - Major industry news as IBM announces its acquisition of the data streaming platform Confluent.

Here is the list of links for this week: Cloud & Infrastructure AWS re:Invent 2025 - Keynote with Dr.

What Edu is Reading This Week « This space for rent » :D AI, LLMs & Automation Model Context Protocol (MCP) Introduction: Documentation for the Model Context Protocol, an open standard designed to enable AI agents (LLMs) to interact securely and predictab…

What Edu is Reading This Week Plenty of content this week!

What Edu is Reading This Week Fifth week in a row!

My current workflow to create the weekly reading posts Here is a breakdown of the simple, automated, and edited workflow I currently follow every week: 1.

Another week goes by, another collection of links I found interesting… Infrastructure and Operating Systems FreeBSD Officially Supported in OCI Runtime Specification v1.3 - The Open Container Initiative (OCI) Runtime Specification v1.3 officially includes…

Another week goes by, another collection of links I found interesting… Infrastructure and Platform Engineering formae: Infrastructure-as-Code Platform Built for the Future - A 100% code-based, agentic IaC tool that automatically syncs code with the actual…

Another week goes by!

What Edu is Reading This Week People often ask me about the cool stuff I stumble upon during the week.

I wanted to have specific permissions on the /var/lib/libvirt/images folder to be able to write as my user.

I wanted to simulate a RedFish BMC to be able to power on/off libvirt virtualmachines and attach ISOs as I do for baremetal hosts.

I wanted to configure a VM to act as a router between two networks, providing DHCP and DNS services as well. │ │ │ │ ┌──────┐ │ │ │ │ │ ┌────────────┐ ├───┤ vm01 │ ├─┤ dhcprouter ├──┤ │ │ │ └────────────┘ │ └──────┘ │ │ │ │ ┌──────┐ │ │ │ │ │ ├───┤ vm02 │…

I wanted to compile the hypershift binary but it requires golang 1.17 which is not included in Fedora 35, so I ended up doing this: mkdir .

To be able to monitor hardware health, status and information on HP servers running RHEL, it is required to install the HP’s Service Pack for Proliant packages.