Showing Post From Containers
Container engines in 2026: revisit Docker Engine, Podman and containerd before you install another container daemon
On most teams, installing a container engine is the first thing done on a new machine and the last thing anybody thinks about.
Read moreContainer sandboxing in 2026: revisit gVisor, Kata Containers and Firecracker before you run another untrusted workload
A normal container is a set of Linux processes with namespaces, cgroups, capabilities and a seccomp profile around them. That is a good packaging boundary and a reasonable resource boundary.
Read moreContainer registries in 2026: revisit Harbor, Zot and CNCF Distribution before you push another image
Picture a product engineering team in Bengaluru that runs about forty microservices on Kubernetes for a B2B payments product used by NBFCs across Karnataka and Maharashtra (an invented example, not a real client).
Read moreContainer image builds in 2026: revisit BuildKit, Buildah and kaniko before you change your CI builder
Picture a payments software company in Pune (an invented example, not a real client). Since 2021 its GitLab runners on Kubernetes have built every service image with gcr.
Read more