This article explains how ListenerSet in Gateway API v1.5 separates listeners from Gateways so teams can restore self-service TLS management across namespaces and scale beyond the old listener limit
➤ https://t.co/uIjsaqL7NL
Wrote a blog: Improvements to Rootless mode in Docker v29.5
https://t.co/8cbGXw8pKM
- Faster image pulling and pushing
- Support for `docker run --net=host`
- Support for localhost registries
- Source IP propagation without the legacy slirp4netns dependency
Helm CEL is a Helm plugin that leverages Common Expression Language (CEL) to validate values, offering a more expressive and flexible alternative to traditional JSON Schema validation
➜ https://t.co/RecSHjzHsb
k8s-bootstrap generates GitOps-ready Kubernetes cluster configurations through a web UI where you select components such as ingress controllers, security tools, and observability platforms
➜ https://t.co/OT7KIB5gzu
zot is a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire
➤ https://t.co/n5EsZhwhYH
Uncloud is a lightweight clustering tool that deploys and manages containerized applications across Docker hosts using Docker Compose syntax
➜ https://t.co/H5TXnkuZN7
Graham Helton has just published a disclosure of a Kubernetes vulnerability that allows running arbitrary commands in any pod in a cluster using a common "read-only" RBAC permission. And this vulnerability won't be assigned a CVE, meaning Kubernetes won't receive a fix 🤷♂️
https://t.co/vQsbf8U3wR
But there is a silver lining. Graham prepared a short auxiliary post that focuses specifically on the reproduction, and it's an iximiuz Labs tutorial: https://t.co/Zze2ybpkXP 💙
We definitely need more security researchers publishing exploit reproductions as code labs anyone can run and verify!
This article reveals hard-earned lessons on using Kubernetes Informers in large clusters, explaining informer fundamentals, handler design pitfalls, caching, memory optimization, and workqueue best practices for scalable controller code
➤ https://t.co/zwNAWQvpVE
2025 year wrap-up for iximiuz Labs 🚀
- 21K+ new users (12K in 2024)
- ~160K VMs fired up (x2 YoY)
- 31K challenge submissions, 18K accepted
- 830 playgrounds created
- First net-positive year after ~3 years of bootstrapping
Biggest features 🛠️
- Playgrounds 2.0 (multi-VM, multi-network, multi-disk, custom rootfs, kernel switcher)
- Persistent playgrounds + instant clones
- Coding-agent base playground
- Markdown and YAML-powered, shareable playgrounds
- Faster boots via SSH-over-VSOCK
- Bigger & more reliable infra (AP region x3, EU region gets better servers)
Content in 2025 📚
- 20+ tutorials (incl. a 5k-word deep dive on container filesystems)
- ~40 public challenges (+50 private)
- Hands-on Docker Roadmap launched
- 7 skill paths (containers + eBPF)
- ~50 trainer-led events, incl. 4 real-world university courses
Business 📈
- $185K revenue in 2025
- ~3,000 Premium members
- ~2,000 lifetime Premiums
- Premium got cheaper (VAT-incl + PPP discounts)
2026 focus: content, content, content 🤓
- Finish Docker Roadmap
- Two hands-on Kubernetes roadmaps
- More networking fundamentals
- Better content discovery, author profiles, creator monetization
Looking back at what shipped in 2025, I'm convinced we've built enough momentum to make 2026 a truly exceptional year for the platform! 💪
Inside the Linux Kernel: The Art of Linux Kernel Compilation and Booting
An in-depth guide to Linux kernel compilation and the boot process, exploring kernel configuration, build systems, and the intricate steps from bootloader to running system.
GitHub - openkube-hub/KubeUser: Kubernetes-native user management operator
Lightweight Kubernetes-native user management operator that simplifies user authentication and authorization through declarative custom resources. https://t.co/VrsQ1tHO7k
This project provides tools and code to build OCI-compatible container images directly inside Kubernetes clusters and containerized environments, without requiring a Docker daemon
➜ https://t.co/8H0P97GVk5
Iximiuz Labs subscription is now on sale with a 70% discount.
It's essentially the price of a coffee per month.
If you're looking to enhance your skills in containers or networking, you won't find a better investment than this.
Docker Hands-On: Pass Environment Variables to Containers 🛠️
A container is an isolated and restricted "box" that runs your application. By definition, this means the env vars you set in your terminal won't be visible to the containerized app.
Practice: https://t.co/gBPe6DdmzU
Persistent Playgrounds on iximiuz Labs 🚀
A video demo for now, and the release is on its way to production servers. It's a massive upgrade, but I'm hoping to be done with it by ~tomorrow afternoon🤞