trying to prevent container breakouts using... more containers has to got to be one of the more brilliant things we've ever heard of /s

a few days earlier than normal - chat it up on this week's application spotlight through your very own AIM server deployed as a unikernel youtube.com/watch?v=6roLFK…

Happy SysAdmin Appreciation Day! and if you are closer to the bastard operator from hell side, one tip from one to another, get rid of the lusers; clean up the liquor bottles, put down the pagerduty && ship unikernels to prod. No users, shells - just the app virtualized.

we now have over 67 languages that work out of the box w/nanos - the rosetta stone of unikernels

Introduction to Unikernel: Building and Deploying Lightweight, Secure Applications tallysolutions.com/technology/int… via Tally Solutions

For those in the back. You CAN NOT build a sandbox on containers. linuxjournal.com/content/when-f…

nextron-systems.com/2025/08/01/pla… “Uh. Mr. The Plague, sir? I think we have a hacker.” then... get rid of the pam, the ssh, the shell, the users, the the passwords unikernels aren't rocket science - it's common sense

"it's very common to run CGI scripts as root." something something loaded pistol...

the eBPF minefield awakens - it was always a bad idea to let the container folks go hog wild on this

this week on the unikernel application spotlight we are looking at pogocache via Josh Baker youtube.com/watch?v=zDgl5Z… - w/a focus on min. cycles/latency, increasing throughput && multi wire proto - chk it out!

Plenty of organizations have started to turn to internal developer platforms (IDP) ran by platform engineers. Unikernel based IDPs are different than legacy based container IDPs in every component. nanovms.com/blog/unikernel…

missed this but looks like frankenphp by Kévin Dunglas just recently became a part of the The PHP Foundation thephp.foundation/blog/2025/06/0… - congrats! frankenphp is an excellent choice for anyone wishing to run php unikernels

this week on containers can't contain the containerati find out that a lesser priv. task can be hijacked to access higher-privileged tasks on ECS - ECS-cape github.com/naorhaziz/ecsc…

this week on the unikernel application spotlight we take a look at running the feature flag daemon, flagd via OpenFeature youtube.com/watch?v=A3zu4E…

Hot Aisle Kieran Kunhya 🚀 the tiny corp Unikernels are a thing. Linux is ~3 orders of magnitude bigger than minimal kernel that is needed to run modern ML jobs at scale. Hardware support, scheduling, networking are all vastly simpler.

After a break, I am back with new episodes :) Soon bringing following amazing folks and topics: - Philipp Fent to talk about CedarDB - social:x#tweet@user:jimmy to talk about authzed - Ian Eyberg to talk about NanoVMs Super interesting technologies! Stay tuned!

We're not content with making your server-side software go hella faster and safer. We want it to be hella easier too. We've made a few jokes about shipping to prod through a desktop shortcut - well we did it - double clicking on unikernels: youtube.com/watch?v=P0KLBx…

this week on the unikernel application spotlight we check out Taleshape youtube.com/watch?v=tmRo6f… - a minimal data platform built with DuckDB && NATS.io

if we're going to bait with stupid benchmarks than here's a stupid benchmark to bait you with: