Peter Rossbach retweeted
Building a Docker-like Container From Scratch 🛠️
Learn about the key Linux namespaces by assembling a tiny but realistic container using only stock Linux commands: unshare, mount, and pivot_root. No runtime magic and (almost) no cut corners.
labs.iximiuz.com/tutorials/c…
Peter Rossbach retweeted
This article explains why Ingress is being replaced by the Gateway API, what the new Gateway, Route and Policy resources actually do, and how to choose a gateway controller before migrating
➜ ku.bz/5TpylGbvV
This tool gives you a find-like experience for Kubernetes resources, letting you search by name regex, age, labels, status, image name or node, then patch, exec or delete the matching items
➤ ku.bz/S9g9fRBmJ
Peter Rossbach retweeted
k8s-d2 generates D2 diagram files from Kubernetes cluster topology, visualizing namespaces, workloads, services, and their relationships with customizable grid layouts and filtering options
➤ ku.bz/xQh3dWh5q
Peter Rossbach retweeted
TLDR facts about Docker Sandboxes (based on its install):
Uses ContainerD compiled natively for Mac OS and uses Nerdbox for the VMs:
├── bin
│ └── sbx
├── libexec
│ ├── containerd-shim-nerdbox-v1 <- Nerbox integration for ContainerD
│ ├── mkfs.erofs
│ ├── mkfs.ext4
│ ├── nerdbox-kernel-arm64
│ └── nerdbox-rootfs-arm64.erofs
More info about Nerdbox is here github.com/containerd/nerdbo…
Peter Rossbach retweeted
iximiuz Labs gift cards and team access are out!
If you want to get premium access to iximiuz Labs for your friend or your entire team (as a manager, I hope), it's now just a couple of clicks away. And the gift cards even look decent.
Peter Rossbach retweeted
Finally, the first Shell Gym learning path I'm more or less happy with: "Meet the Linux Shell" github.com/iximiuz/shellgym/….
It's almost entirely AI-generated, but the prompt was 4,000 lines long, so I'm inclined to claim the authorship.
Already loaded into the Shell Gym playground.
Peter Rossbach retweeted
zot is a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire
➜ ku.bz/pGynn6_Nx
Peter Rossbach retweeted
And you can now run Kubernetes natively in apple containers github.com/saiyam1814/kiac
Apple ha sacado su propio “Docker” nativo y oficial.
Permite ejecutar contenedores Linux en máquinas virtuales ligeras en macOS.
✓ Compatible con imágenes OCI de Docker Hub
✓ Optimizado para Apple Silicon
✓ Escrito en Swift
→ github.com/apple/container

ALT Captura del repositorio público apple/container en GitHub, mostrando el README del proyecto. Se destaca que container permite crear y ejecutar contenedores Linux como máquinas virtuales ligeras en Mac, está escrito en Swift, optimizado para Apple Silicon y compatible con imágenes OCI. Docker mirando de reojo desde la esquina.
Peter Rossbach retweeted
This article explains how ListenerSet in Gateway API v1.5 separates listeners from Gateways so teams can restore self-service TLS management across namespaces and scale beyond the old listener limit
➤ ku.bz/s-5QsVS_T
Peter Rossbach retweeted
Wrote a blog: Improvements to Rootless mode in Docker v29.5
medium.com/nttlabs/improveme…
- Faster image pulling and pushing
- Support for `docker run --net=host`
- Support for localhost registries
- Source IP propagation without the legacy slirp4netns dependency
Peter Rossbach retweeted
Helm CEL is a Helm plugin that leverages Common Expression Language (CEL) to validate values, offering a more expressive and flexible alternative to traditional JSON Schema validation
➜ ku.bz/dhWP3Vk7q
Peter Rossbach retweeted
k8s-bootstrap generates GitOps-ready Kubernetes cluster configurations through a web UI where you select components such as ingress controllers, security tools, and observability platforms
➜ ku.bz/f5HxM0CBt
zot is a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire
➤ ku.bz/fwXd6-TN9
Peter Rossbach retweeted
How etcd works with and without Kubernetes
learnkube.com/etcd-kubernete…
Uncloud is a lightweight clustering tool that deploys and manages containerized applications across Docker hosts using Docker Compose syntax
➜ ku.bz/VQC0VyVh-
Peter Rossbach retweeted
Graham Helton has just published a disclosure of a Kubernetes vulnerability that allows running arbitrary commands in any pod in a cluster using a common "read-only" RBAC permission. And this vulnerability won't be assigned a CVE, meaning Kubernetes won't receive a fix 🤷♂️
grahamhelton.com/blog/nodes-…
But there is a silver lining. Graham prepared a short auxiliary post that focuses specifically on the reproduction, and it's an iximiuz Labs tutorial: labs.iximiuz.com/tutorials/n… 💙
We definitely need more security researchers publishing exploit reproductions as code labs anyone can run and verify!
This article reveals hard-earned lessons on using Kubernetes Informers in large clusters, explaining informer fundamentals, handler design pitfalls, caching, memory optimization, and workqueue best practices for scalable controller code
➤ ku.bz/CxjFsDzdy
Peter Rossbach retweeted
2025 year wrap-up for iximiuz Labs 🚀
- 21K+ new users (12K in 2024)
- ~160K VMs fired up (x2 YoY)
- 31K challenge submissions, 18K accepted
- 830 playgrounds created
- First net-positive year after ~3 years of bootstrapping
Biggest features 🛠️
- Playgrounds 2.0 (multi-VM, multi-network, multi-disk, custom rootfs, kernel switcher)
- Persistent playgrounds + instant clones
- Coding-agent base playground
- Markdown and YAML-powered, shareable playgrounds
- Faster boots via SSH-over-VSOCK
- Bigger & more reliable infra (AP region x3, EU region gets better servers)
Content in 2025 📚
- 20+ tutorials (incl. a 5k-word deep dive on container filesystems)
- ~40 public challenges (+50 private)
- Hands-on Docker Roadmap launched
- 7 skill paths (containers + eBPF)
- ~50 trainer-led events, incl. 4 real-world university courses
Business 📈
- $185K revenue in 2025
- ~3,000 Premium members
- ~2,000 lifetime Premiums
- Premium got cheaper (VAT-incl + PPP discounts)
2026 focus: content, content, content 🤓
- Finish Docker Roadmap
- Two hands-on Kubernetes roadmaps
- More networking fundamentals
- Better content discovery, author profiles, creator monetization
Looking back at what shipped in 2025, I'm convinced we've built enough momentum to make 2026 a truly exceptional year for the platform! 💪






















