I was experimenting with reducing the attack surface of my Docker containers and came across @chainguard_dev distroless images.
At first, switching from a traditional Node runtime to a distroless image broke almost everything 😭
- missing shell
- permission issues
- build errors
- runtime failures
After digging through docs and experimenting with multi-stage builds, I finally got it working.
The result:
✅ Smaller runtime image
✅ Minimal packages
✅ Close to zero known CVEs in Trivy & Docker Scout scans
Container security is not only about application code.
It also depends on what you ship inside the container.
Wrote a detailed breakdown here:
��https://t.co/CbdigLfbcm
#Docker #DevOps #Kubernetes #ContainerSecurity #Chainguard
Last week built an incident management system project and it got out of hand lol
ended up stress testing it without rate limits — handles 50k signals clean, starts dropping at 80-100k with proper 503s, no crashes
the part that actually clicked for me: the go channel sitting before redis is what makes the whole thing not fall over. HTTP 202 back to the caller immediately, figure out redis later
idk i just thought it was cool
#golang #buildinpublic
Recently designed and implemented an end-to-end serverless system that dynamically sends notifications via SMS or Email.
Built a serverless messaging system on AWS:
S3 → API Gateway → Lambda → Step Functions → SNS/SES
📌 How it works:
- User submits a form from a static website
- API Gateway triggers a Lambda function
- Step Functions decides the workflow based on input
- Message is sent via SNS (SMS) or SES (Email)
🚨 A high-vulnerability CVE (CVE-2026-4342) has been identified in ingress-nginx.
This vulnerability enables configuration injection and potential code execution on all versions below v1.13.9, v1.14.5, and v1.15.1.
As ingress-nginx is now EOL (End of Life), users are strongly encouraged to upgrade and migrate immediately.
Details: https://t.co/3tgfCAK8pw
Oh wow... Pika just dropped real-time video chat for AI agents.
Now you can send a Google Meet invite to your Claude, OpenClaw, or other AI agent and have it join the call.
This completely changes how you talk to AI 🤯